CVE-2018-4868

Опубликовано: 03 янв. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.

Ссылки

http://www.securityfocus.com/bid/102477
Third Party Advisory
VDB Entry
https://github.com/Exiv2/exiv2/issues/202
Exploit
Issue Tracking
Third Party Advisory
http://www.securityfocus.com/bid/102477
Third Party Advisory
VDB Entry
https://github.com/Exiv2/exiv2/issues/202
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00384

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVE-2018-4868

CVSS3: 5.5

ubuntu

больше 7 лет назад

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.

CVE-2018-4868

CVSS3: 5.3

redhat

больше 7 лет назад

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.

CVE-2018-4868

CVSS3: 5.5

debian

больше 7 лет назад

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0. ...

GHSA-8x93-7gj9-73c3

CVSS3: 5.5

github

около 3 лет назад

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.

RLSA-2020:1577

rocky

больше 5 лет назад

Moderate: exiv2 security, bug fix, and enhancement update

EPSS

Процентиль: 59%

0.00384

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-770