Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wrhh-wfqw-8957

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

EPSS

Процентиль: 70%
0.00647
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 7 лет назад

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

CVSS3: 4.4
redhat
больше 7 лет назад

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

CVSS3: 6.5
nvd
больше 7 лет назад

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.

CVSS3: 6.5
debian
больше 7 лет назад

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Ip ...

oracle-oval
почти 6 лет назад

ELSA-2019-2101: exiv2 security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 70%
0.00647
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-125