There is a NULL pointer dereference at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.
Weakness
The product dereferences a pointer that it expects to be valid but is NULL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Liblas | Liblas | 1.8.1 (including) | 1.8.1 (including) |
| Liblas | Ubuntu | bionic | * |
| Liblas | Ubuntu | cosmic | * |
| Liblas | Ubuntu | disco | * |
| Liblas | Ubuntu | trusty | * |
| Liblas | Ubuntu | xenial | * |
Potential Mitigations
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1652611
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/
- https://bugzilla.redhat.com/show_bug.cgi?id=1652611
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3TPVZSUWM5TEAMCBL3Y7QLGQSLCCJFIT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFI3F3PRKPXOITWD47LF6ON4L5MJQQYM/