Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12955

Опубликовано: 17 авг. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6exiv2Will not fix
Red Hat Enterprise Linux 7exiv2Will not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1487207exiv2: Heap-based buffer overflow in basicio.cpp

EPSS

Процентиль: 78%
0.01121
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS3: 8.8
nvd
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS3: 8.8
debian
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. Th ...

CVSS3: 8.8
github
почти 4 года назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

suse-cvrf
больше 7 лет назад

Security update for exiv2

EPSS

Процентиль: 78%
0.01121
Низкий

3.3 Low

CVSS3