CVE-2018-20099

Опубликовано: 12 дек. 2018

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

Ссылки

https://access.redhat.com/errata/RHSA-2019:2101
https://github.com/Exiv2/exiv2/issues/590
Issue Tracking
Patch
Third Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206
Exploit
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/
https://access.redhat.com/errata/RHSA-2019:2101
https://github.com/Exiv2/exiv2/issues/590
Issue Tracking
Patch
Third Party Advisory
https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206
Exploit
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:0.27:rc3:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00468

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2018-20099

CVSS3: 6.5

ubuntu

больше 6 лет назад

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

CVE-2018-20099

CVSS3: 3.3

redhat

больше 6 лет назад

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

CVE-2018-20099

CVSS3: 6.5

debian

больше 6 лет назад

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2im ...

GHSA-wr4g-wr5g-w9c8

CVSS3: 6.5

github

около 3 лет назад

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

SUSE-SU-2022:4276-1

suse-cvrf

больше 2 лет назад

Security update for exiv2

EPSS

Процентиль: 64%

0.00468

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-835