Launchpad.net

CVE 2016-9839

In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.

CVE-2016-9839 (Candidate) is related to these bugs:

Bug #1648998: Fix CVE-2016-9839 & CVE-2017-5522

		In	Importance	Status
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu)	Medium	Fix Released
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu Precise)	Undecided	Fix Released
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu Xenial)	Undecided	Fix Released
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu Trusty)	Undecided	Fix Released
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu Zesty)	Medium	Fix Released
1648998	Fix CVE-2016-9839 & CVE-2017-5522	mapserver (Ubuntu Yakkety)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.