CVE-2020-18898

Опубликовано: 19 авг. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.

Ссылки

https://cwe.mitre.org/data/definitions/674.html
Third Party Advisory
https://github.com/Exiv2/exiv2/issues/741
Exploit
Issue Tracking
Third Party Advisory
https://cwe.mitre.org/data/definitions/674.html
Third Party Advisory
https://github.com/Exiv2/exiv2/issues/741
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:exiv2:exiv2:0.27:-:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00158

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-674

Связанные уязвимости

CVE-2020-18898

CVSS3: 6.5

ubuntu

почти 4 года назад

A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.

CVE-2020-18898

CVSS3: 6.5

redhat

почти 4 года назад

A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.

CVE-2020-18898

CVSS3: 6.5

debian

почти 4 года назад

A stack exhaustion issue in the printIFDStructure function of Exiv2 0. ...

RLSA-2022:1842

rocky

около 3 лет назад

Moderate: exiv2 security, bug fix, and enhancement update

RLSA-2022:1797

rocky

около 3 лет назад

Moderate: compat-exiv2-026 security update

EPSS

Процентиль: 37%

0.00158

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-674