ALT-PU-2015-1581

Низкий

ALT-PU-2015-1581: package exiv2 update to version 0.25-alt1

Источник

errata.altlinux.org

Дата публикации

29.06.2015

Дата обновления

29.06.2015

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades exiv2 to version 0.25-alt1.

Устраненные уязвимости1

CVE-2014-9449

Средний 5

Дата публикации: 02.01.2015

CWE-119

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

CVSS 2.0

Средний 5

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2014-9449 https://nvd.nist.gov/vuln/detail/CVE-2014-9449

Ссылки1

ALT-PU-2015-1581 https://errata.altlinux.org/ALT-PU-2015-1581

Связанные уязвимости

CVE-2014-9449

ubuntu

почти 12 лет назад

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

CVE-2014-9449

redhat

больше 12 лет назад

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

CVE-2014-9449

nvd

почти 12 лет назад

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.

CVE-2014-9449

debian

почти 12 лет назад

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvide ...

GHSA-cc42-3g88-r78c

github

больше 4 лет назад

Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.