Mapserver
Vendor:
First CVE: Mar 31, 2009 · Active for 17 years
14
Total CVEs
More Total CVEs than 91% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 82% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 70% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mapserver over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 31, 2009
17 years ago
Most Recent CVE
Jan 5, 2014
4,583 days ago
CVE Severity & Scoring
Mapserver14 CVEs
21%
71%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown14 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown14 (100.0%)
User Interaction
None0 (0.0%)
Unknown14 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown14 (100.0%)
Top CVEs
Signals from CVEs in this product scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-2975MEDIUM Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or | Aug 1, 2011 | 6.8 | 33 | NO | YES |
CVE-2010-2540HIGH mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows | Aug 2, 2010 | 10.0 | 29 | NO | NO |
CVE-2009-0839HIGH Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows r | Mar 31, 2009 | 10.0 | 28 | NO | NO |
CVE-2009-2281HIGH Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute ar | Oct 23, 2009 | 10.0 | 27 | NO | NO |
CVE-2009-1176HIGH mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote atta | Mar 31, 2009 | 10.0 | 26 | NO | NO |
CVE-2009-0841HIGH Directory traversal vulnerability in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when running on Windows with Cygwin, allows remote attackers to creat | Mar 31, 2009 | 10.0 | 26 | NO | NO |
CVE-2009-0840HIGH Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impa | Mar 31, 2009 | 10.0 | 26 | NO | NO |
CVE-2009-1177HIGH Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors. | Mar 31, 2009 | 10.0 | 25 | NO | NO |
CVE-2011-2704HIGH Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding. | Aug 1, 2011 | 7.5 | 24 | NO | NO |
CVE-2013-7262MEDIUM SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execu | Jan 5, 2014 | 6.8 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (14 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
7.1% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (14 CVEs).
Media Mentions
Signals from CVEs in this product scope (14 CVEs).
Top CNAs Publishing CVEs For Mapserver
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 6.0.0 | 3 | 7.2 | 3.5% | 0 | 1 |
| 5.6.7 | 2 | 6.8 | 3.4% | 0 | 1 |
| 5.6.6 | 3 | 7.3 | 4.2% | 0 | 1 |
| 5.6.5 | 3 | 7.3 | 4.2% | 0 | 1 |
| 5.6.4 | 3 | 7.3 | 4.2% | 0 | 1 |
| 5.2.3 | 4 | 7.2 | 3.7% | 0 | 1 |
| 5.2.2 | 3 | 7.3 | 4.2% | 0 | 1 |
| 4.10.7 | 1 | 6.8 | 4.6% | 0 | 1 |
| 4.0 | 10 | 8.8 | 4.6% | 0 | 0 |