What’s Vulnerable › Vulnerabilities

CVE-2008-7227

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2009-09-14 · updated 2026-06-16
• Weakness: CWE-119

Description

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.

Affected products

• geoserver: through 1.6.0; 1.3.0, 1.3.0-beta, 1.3.0-pr1, 1.3.0-rc2, 1.3.0-rc4, 1.3.0-rc6 (+19)

References

• http://jira.codehaus.org/browse/GEOS-1747
• http://osvdb.org/43266
• http://jira.codehaus.org/browse/GEOS-1747
• http://osvdb.org/43266

Get alerted when CVE-2008-7227 or the next vulnerability affects your stack