CVE-2017-5522: Buffer Overflow
Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5522?
CVE-2017-5522 has a high severity due to the potential for remote code execution and denial of service.
How do I fix CVE-2017-5522?
To fix CVE-2017-5522, upgrade to MapServer version 6.0.6, 6.2.4, 6.4.5, or 7.0.4 or later.
What types of attacks are possible with CVE-2017-5522?
Attackers can exploit CVE-2017-5522 through stack-based buffer overflow via malicious WFS get feature requests.
Which MapServer versions are affected by CVE-2017-5522?
CVE-2017-5522 affects MapServer versions before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4.
What platforms are vulnerable to CVE-2017-5522?
CVE-2017-5522 affects multiple platforms, including Debian GNU/Linux 8.0 and various versions of MapServer.