CVE-2019-17545 PUBLISHED

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

EPSS 2.25% · 84.4th percentile

Risk Scores

EPSS Score
2.25%
84.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSgdal0, 1.11.3+dfsg-3build2, 1.11.3+dfsg-3build1
Ubuntu:18.04:LTSgdal2.2.3+dfsg-2, 0, 2.2.1+dfsg-2build3
Ubuntu:Pro:14.04:LTSgdal1.10.1+dfsg-3, 1.10.1+dfsg-2build1, 1.10.1+dfsg-2

Timeline

References

Open in Interactive Console →