CVE:CVE-2019-17545
CNNVD:CNNVD-201910-791
GDAL是一款开源的地理空间数据抽象库。
GDAL 3.0.1及之前版本中的ogr/ogr_expat.cpp文件的OGRExpatRealloc存在资源管理错误漏洞。该漏洞源于网络系统或产品对系统资源（如内存、磁盘空间、文件等）的管理不当。
solution:Upgrade osgeo gdal to a higher version than 3.0.1,and avoid the version (,3.0.1]; Upgrade oracle spatial_and_graph to a higher version than 12.2.0.1,19c,and avoid the version 12.2.0.1,19c; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1