CVE-2018-10772

Опубликовано: 07 мая 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

Ссылки

https://access.redhat.com/errata/RHSA-2019:2101
https://bugzilla.redhat.com/show_bug.cgi?id=1566260
Exploit
Issue Tracking
Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2101
https://bugzilla.redhat.com/show_bug.cgi?id=1566260
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*

Версия до 0.26 (включая)

EPSS

Процентиль: 73%

0.01608

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2018-10772

CVSS3: 6.5

ubuntu

около 8 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVE-2018-10772

CVSS3: 4.3

redhat

больше 8 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVE-2018-10772

CVSS3: 6.5

debian

около 8 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allow ...

GHSA-6g7p-q9ph-fpw6

CVSS3: 6.5

github

около 4 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

SUSE-SU-2022:3598-1

suse-cvrf

почти 4 года назад

Security update for exiv2

EPSS

Процентиль: 73%

0.01608

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119