CVE-2017-5522

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-5522
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5522.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-5522
Downstream
Published
2017-03-15T16:59:00.283Z
Modified
2026-05-13T12:00:57.747796796Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

References

Affected packages

Git / github.com/mapserver/mapserver

Affected ranges

Type
GIT
Repo
https://github.com/mapserver/mapserver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a50744748797057f2c3a7509cd82e36dde6d9eb6
Last affected
d5e2cef47422e257fea58d6492ff8ab2c8f9c2da
Last affected
6c9d17a2ca188e552703d472de2b57f2ea7a98d4
Last affected
cb058f64f2500e7cc809d8a171c5d20dee3a3aac
Last affected
736493b16104b79e3b0b2e26f8cecf345f91fc3a
Last affected
00791ca448286592c609951db4ac531e34bbed46
Last affected
e15f0a64071a215a616c0164326384ee33f1d02b
Last affected
1f554956e8095623bffa18b6ad7ad14841ab15a9
Last affected
3b531be271a1a01701e92eb7029d1914df466872
Last affected
3a70778f80c4f93409ba08b1479199f6105971fd
Last affected
f455dfe7b1b327d90b26c002ac9b4a9bf995acff
Last affected
a098e546885dd7244ce6174ec11e6f0410879a41
Last affected
3af20733f10c59b3f08d4031d2c91c8776bd0e1e
Last affected
650cc30cd0c1df54d65493cf0781884d788fcd6d
Last affected
44dc7510cb67afa0292c56593e6052fdd1fce32f
Last affected
44ac0871f511e0678795b601cb5c69a52776e25f
Last affected
1882b7c0f5898c14661bcffe00665c3f365da1e2
Last affected
5449a6ad858659f3dfed34886237567b207cb85e
Last affected
3392ca15f3aee0806b8ca0cae056e3c9bbc704a9
Last affected
67831cb3dfda9a7103a0ea1bf5da67d351802ff0
Last affected
936518bac4b6ed449d9883c36f1fd01ebfd70c2d
Last affected
e91f7b28f391ddafe5ce1a5eb79cefe633c36eaf
Last affected
6ae2bc6915d73417f4fea78201d4f7087c25b3f1
Last affected
4ea78eb919147924bbf66d426a0bb8000f94c768
Last affected
0f9ece882a48a286f933a17aa40880073df93aac
Database specific 
{
    "cpe": [
        "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:6.4.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:osgeo:mapserver:7.0.3:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "8.0"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "last_affected": "6.2.0"
        },
        {
            "last_affected": "6.2.0-beta1"
        },
        {
            "last_affected": "6.2.0-beta2"
        },
        {
            "last_affected": "6.2.0-beta3"
        },
        {
            "last_affected": "6.2.0-beta4"
        },
        {
            "last_affected": "6.2.0-rc1"
        },
        {
            "last_affected": "6.2.1"
        },
        {
            "last_affected": "6.2.2"
        },
        {
            "last_affected": "6.2.3"
        },
        {
            "last_affected": "6.4.0"
        },
        {
            "last_affected": "6.4.0-beta1"
        },
        {
            "last_affected": "6.4.0-beta2"
        },
        {
            "last_affected": "6.4.0-rc1"
        },
        {
            "last_affected": "6.4.1"
        },
        {
            "last_affected": "6.4.2"
        },
        {
            "last_affected": "6.4.3"
        },
        {
            "last_affected": "6.4.4"
        },
        {
            "last_affected": "7.0.0"
        },
        {
            "last_affected": "7.0.0-beta1"
        },
        {
            "last_affected": "7.0.0-beta2"
        },
        {
            "last_affected": "7.0.1"
        },
        {
            "last_affected": "7.0.2"
        },
        {
            "last_affected": "7.0.3"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

6.*
6.0.3
Other
rel-3-4
rel-3-5-0
rel-4-0-0
rel-4-10-0
rel-4-10-0-beta1
rel-4-10-0-beta2
rel-4-10-0-beta3
rel-4-10-0-rc1
rel-4-4-0
rel-4-4-0-beta1
rel-4-4-0-beta2
rel-4-4-0-beta3
rel-4-6-0
rel-4-6-0-beta1
rel-4-6-0-beta2
rel-4-6-0-beta3
rel-4-6-0-rc1
rel-4-8-0-beta1
rel-4-8-0-beta2
rel-4-8-0-beta3
rel-4-8-0-rc2
rel-6-0-3-0
rel-6-0-4
rel-6-0-5
rel-6-2-0
rel-6-2-0-beta1
rel-6-2-0-beta2
rel-6-2-0-beta3
rel-6-2-0-beta4
rel-6-2-0-rc1
rel-6-2-1
rel-6-2-2
rel-6-2-3
rel-6-4-0
rel-6-4-0-beta1
rel-6-4-0-beta2
rel-6-4-0-rc1
rel-6-4-1
rel-6-4-2
rel-6-4-3
rel-6-4-4
rel-7-0-0
rel-7-0-0-beta1
rel-7-0-0-beta2
rel-7-0-1
rel-7-0-2
rel-7-0-3
rel-8-0-0
rel-8-0-0-beta1
rel-8-0-0-beta2
rel-8-0-0-rc1
rel-8-0-0-rc2
styleObj

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-5522.json"