Memory Leak in libLAS 1.8.1 by liblas Vendor
CVE-2018-20540

6.5MEDIUM

Key Information:

Vendor

Liblas

Status
Liblas
Vendor
CVE Published:
28 December 2018

What is CVE-2018-20540?

A vulnerability exists in libLAS 1.8.1 due to a memory leak in the liblas::Open function located in liblas/liblas.hpp. This issue can lead to increased memory consumption and potentially degrade system performance over time. It's crucial for users of this library to apply appropriate mitigations and monitor their systems for unusual resource usage.

References

https://bugzilla.redhat.com/show_bug.cgi?id=1652612
x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.