CVE-2017-5522

Critical

Published: 15/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.

Risk Assessment

This vulnerability may lead to system crashes or allow attackers to execute arbitrary code remotely, posing a serious security threat to the organization.

Recommendation

It is recommended to update MapServer to the latest version to mitigate this vulnerability and to monitor the system for unauthorized requests.

Original NVD description (English source)

Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving WFS get feature requests.