CVE-2017-11338

Опубликовано: 17 июл. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1470913
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1470913
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01065

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2017-11338

CVSS3: 6.5

ubuntu

больше 8 лет назад

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

CVE-2017-11338

CVSS3: 5.5

redhat

больше 8 лет назад

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

CVE-2017-11338

CVSS3: 6.5

debian

больше 8 лет назад

There is an infinite loop in the Exiv2::Image::printIFDStructure funct ...

GHSA-72v4-8c49-whvj

CVSS3: 6.5

github

больше 3 лет назад

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

openSUSE-SU-2018:1961-1

suse-cvrf

больше 7 лет назад

Security update for exiv2

EPSS

Процентиль: 77%

0.01065

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835