GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-65e3f233bf advisory.

    Update to GeographicLib-2.5.2, fixes CVE-2025-60751.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e5eb1e35e2 advisory.

    Update to GeographicLib-2.5.2, fixes CVE-2025-60751.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4361 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-4361-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     November 03, 2025                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : geographiclib     Version        : 1.51-1+deb11u1     CVE ID         : CVE-2025-60751

    Geographiclib is a C++ library to solve geodesic problems. A stack buffer     overflow occurs when the GeoConvert tool receives a crafted input. The overflow     occurs because the program does not properly validate an internal index,     allowing an out-of-bounds write on the stack. An attacker can exploit this     vulnerability to hijack the program's control flow by overwriting a return     address to point to a libc function and execute arbitrary code.

    For Debian 11 bullseye, this problem has been fixed in version     1.51-1+deb11u1.

    We recommend that you upgrade your geographiclib packages.

    For the detailed security status of geographiclib please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/geographiclib

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode. (CVE-2025-60751)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
274386	Fedora 42 : GeographicLib (2025-65e3f233bf)	Nessus	Fedora Local Security Checks	high
274385	Fedora 43 : GeographicLib (2025-e5eb1e35e2)	Nessus	Fedora Local Security Checks	high
272231	Debian dla-4361 : geographiclib-doc - security update	Nessus	Debian Local Security Checks	high
271648	Linux Distros Unpatched Vulnerability : CVE-2025-60751	Nessus	Misc.	high

Detections

Analytics

CVE-2025-60751

high

Tenable Plugins

high

high

high

high