Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12955

Опубликовано: 17 авг. 2017
Источник: redhat
CVSS3: 3.3

Описание

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6exiv2Will not fix
Red Hat Enterprise Linux 7exiv2Will not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1487207exiv2: Heap-based buffer overflow in basicio.cpp

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS3: 8.8
nvd
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

CVSS3: 8.8
debian
больше 8 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. Th ...

CVSS3: 8.8
github
больше 3 лет назад

There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

suse-cvrf
больше 7 лет назад

Security update for exiv2

3.3 Low

CVSS3