https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:35:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-12080 bdu:2026-12080 https://cve.radiocsirt.org/vuln/bdu:2026-12080 https://cve.radiocsirt.org/vuln/euvd-2026-291831 EUVD-2026-291831 https://cve.radiocsirt.org/vuln/euvd-2026-291831 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33721 <p>MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.</p> <p>MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33721 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10452-1 <p>libjavamapscript-8.6.1-1.1 on GA media</p> <p>libjavamapscript-8.6.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10452-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33721 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mapserver, Ubuntu:18.04:LTS: mapserver, Ubuntu:20.04:LTS: mapserver, Ubuntu:22.04:LTS: mapserver, Ubuntu:24.04:LTS: mapserver, Ubuntu:25.10: mapserver, Ubuntu:26.04:LTS: mapserver</p> <p>MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mapserver, Ubuntu:18.04:LTS: mapserver, Ubuntu:20.04:LTS: mapserver, Ubuntu:22.04:LTS: mapserver, Ubuntu:24.04:LTS: mapserver, Ubuntu:25.10: mapserver, Ubuntu:26.04:LTS: mapserver</p> <p>MapServer is a system for developing web-based GIS applications. Starting in version 4.2 and prior to version 8.6.1, a heap-buffer-overflow write in MapServer’s SLD (Styled Layer Descriptor) parser lets a remote, unauthenticated attacker crash the MapServer process by sending a crafted SLD with more than 100 Threshold elements inside a ColorMap/Categorize structure (commonly reachable via WMS GetMap with SLD_BODY). Version 8.6.1 patches the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33721