CVE-2008-7227
NONE EPSS 56.0%
Published Sep 14, 200916y ago · Modified Jun 16, 20262w ago
Published Sep 14, 2009 16y ago
Last Modified Jun 16, 2026 2w ago
Description
PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
Threat Intelligence
EPSS Exploit Probability
56.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety
Affected Products 26
| Vendor | Product | Version | Range |
|---|---|---|---|
| geoserver | geoserver | * | ≤1.6.0 |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.0 | any |
| geoserver | geoserver | 1.3.2 | any |
| geoserver | geoserver | 1.4.0 | any |
| geoserver | geoserver | 1.4.0 | any |
| geoserver | geoserver | 1.5.0 | any |
| geoserver | geoserver | 1.5.0 | any |
| geoserver | geoserver | 1.5.0 | any |
| geoserver | geoserver | 1.5.1 | any |
| geoserver | geoserver | 1.5.1 | any |
| geoserver | geoserver | 1.5.2 | any |
| geoserver | geoserver | 1.5.3 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.6.0 | any |
| geoserver | geoserver | 1.7.0 | any |
| geoserver | geoserver | 3.0 | any |
References 2
- jira.codehaus.org http://jira.codehaus.org/browse/GEOS-1747
- osvdb.org http://osvdb.org/43266
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.