CVE-2019-1010060

NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow. The impact is: arbitrary code execution. The component is: over 40 source code files were changed. The attack vector is: remote unauthenticated attacker. The fixed version is: 3.43. NOTE: this CVE refers to the issues not covered by CVE-2018-3846, CVE-2018-3847, CVE-2018-3848, and CVE-2018-3849. One example is ftp_status in drvrnet.c mishandling a long string beginning with a '4' character.

• CWE-119

• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458Mailing List, Third Party Advisory
• https://github.com/astropy/astropy/pull/7274Third Party Advisory
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gzThird Party Advisory, US Government Resource
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3430.tar.gzThird Party Advisory, US Government Resource
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txtThird Party Advisory, US Government Resource
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892458Mailing List, Third Party Advisory
• https://github.com/astropy/astropy/pull/7274Third Party Advisory
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3420.tar.gzThird Party Advisory, US Government Resource
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/cfitsio3430.tar.gzThird Party Advisory, US Government Resource
• https://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes2.txtThird Party Advisory, US Government Resource

Published

Jul 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1010042Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1010043Quake3e < 5ed740d is affected by: Buffer Overflow. The impac…
• CVE-2019-1010044borg-reducer c6d5240 is affected by: Buffer Overflow. The im…
• CVE-2019-1010048Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1010054Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (C…
• CVE-2019-1010057nfdump 1.6.16 and earlier is affected by: Buffer Overflow. T…7.8
• CVE-2019-1010061Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1010062PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestric…
• CVE-2019-1010065The Sleuth Kit 4.6.0 and earlier is affected by: Integer Ove…6.5
• CVE-2019-1010066Lawrence Livermore National Laboratory msr-safe v1.1.0 is af…
• CVE-2019-1010069moinejf abcm2ps 8.13.20 is affected by: Incorrect Access Con…5.5
• CVE-2019-1010073Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…