Shapelib shpsort double free vulnerability
Original title: USN-8992-1: Shapelib vulnerability
Shapelib shpsort utility mishandles inputs leading to double free, potentially causing denial of service or arbitrary code execution.
Ubuntu Security Notices describe a vulnerability in the shpsort utility of Shapelib. Incorrect handling of certain inputs leads to a double free, which an attacker could use to cause a denial of service or possibly execute arbitrary code.
- shpsort utility in Shapelib
- Double free vulnerability
- Possible denial of service or arbitrary code execution
Impact: denial of service or arbitrary code execution
From the original article
It was discovered that the shpsort utility in Shapelib incorrectly handled certain inputs, leading to a double free. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.