CVE:CVE-2021-45943
CNNVD:CNNVD-202201-031
GDAL是一款开源的地理空间数据抽象库。
GDAL 中存在缓冲区错误漏洞，该漏洞源于产品的PCIDSK::CPCIDSKSegment::ReadFromFile和PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment函数在调用PCIDSK::CPCIDSKFile::ReadFromFile未能正确判断内存边界。攻击者可通过该漏洞导致缓冲区溢出。以下产品及版本受到影响：GDAL 3.3.0、3.4.0版本。
solution:Upgrade osgeo gdal to a higher version than 3.4.0,and avoid the version [3.3.0,3.4.0]; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade oracle spatial_and_graph to a higher version than 19c,21c,and avoid the version 19c,21c