Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-13111

Опубликовано: 30 июн. 2019
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*
Версия до 0.27.1 (включая)
Конфигурация 2
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.0009
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 6 лет назад

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.

CVSS3: 3.3
redhat
около 6 лет назад

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.

CVSS3: 5.5
debian
около 6 лет назад

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 all ...

CVSS3: 5.5
github
около 3 лет назад

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file.

suse-cvrf
почти 3 года назад

Security update for exiv2

EPSS

Процентиль: 27%
0.0009
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-190