CVE-2019-14368

Опубликовано: 28 июл. 2019

Источник: debian

Описание

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

Пакет	Статус	Версия исправления	Релиз	Тип
exiv2	not-affected			package

https://github.com/Exiv2/exiv2/issues/952
Fixed by: https://github.com/Exiv2/exiv2/commit/bd0afe0390439b2c424d881c8c6eb0c5624e31d9
Introduced by: https://github.com/Exiv2/exiv2/commit/c72d16f4c402a8acc2dfe06fe3d58bf6cf99069e

CVE-2019-14368

CVSS3: 7.8

ubuntu

больше 6 лет назад

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

CVE-2019-14368

CVSS3: 4.7

redhat

больше 6 лет назад

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

CVE-2019-14368

CVSS3: 7.8

nvd

больше 6 лет назад

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.

GHSA-766f-8g6j-2m24

CVSS3: 7.8

github

больше 3 лет назад

Exiv2 0.27.99.0 has a heap-based buffer over-read in Exiv2::RafImage::readMetadata() in rafimage.cpp.