CVE-2016-9839: Infoleak
Published Dec 8, 2016
·Updated
In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.
Affected Software
1 affected component
OSGeo MapServer<=7.0.2
Event History
Dec 8, 2016
CVE Published
via MITRE·08:08 AM
Data Sourced
via MITRE·08:08 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-9839?
CVE-2016-9839 is considered to have a medium severity due to potential information leakage.
2
How do I fix CVE-2016-9839?
To fix CVE-2016-9839, upgrade MapServer to version 7.0.3 or later.
3
What vulnerabilities does CVE-2016-9839 address?
CVE-2016-9839 addresses vulnerabilities related to verbose error messages that can leak sensitive information.
4
What software is affected by CVE-2016-9839?
CVE-2016-9839 affects MapServer versions prior to 7.0.3.
5
Is CVE-2016-9839 still a risk in newer versions of MapServer?
No, CVE-2016-9839 is not a risk in MapServer versions 7.0.3 and later.