CVE-2018-20536: Medium severity liblas vulnerability
Published Dec 28, 2018
·Updated
There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
Affected Software
1 affected component
liblas liblas=1.8.1
Event History
Dec 28, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20536?
CVE-2018-20536 is classified as a denial of service vulnerability.
2
How do I fix CVE-2018-20536?
To mitigate CVE-2018-20536, upgrade libLAS to version 1.8.2 or later.
3
What causes the CVE-2018-20536 vulnerability?
CVE-2018-20536 is caused by a heap-based buffer over-read in the GetGTIF function of liblas.
4
Which software versions are affected by CVE-2018-20536?
CVE-2018-20536 specifically affects libLAS version 1.8.1.
5
What impact does CVE-2018-20536 have on systems?
The impact of CVE-2018-20536 is a denial of service, potentially crashing applications using the vulnerable version.