OSV-2022-1041

    Dashboard / Vulnerabilities / OSV-2022-1041

    OSV-2022-1041

    Published: 12 Oct 2022Last Modified: 12 Oct 2022

    Summary: Heap-buffer-overflow in msyylex

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52305 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: msyylex loadLayer loadMapInternal ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52305

    Affected packages

    Package

    Name: mapserver

    Purl: pkg:generic/mapserver

    Affected ranges

    Type: GIT

    Events:

    Introduced- 3b0aa0d2757512fdaa72c6856ce4cf58ff57f8b4
    Fixed -b062947e3122a7f3dfc5812a230ede71b5bc7664

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-1041 | CVE-DB