Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-12957

Опубликовано: 17 авг. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6exiv2Will not fix
Red Hat Enterprise Linux 7exiv2Will not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-122
https://bugzilla.redhat.com/show_bug.cgi?id=1487210exiv2: Heap-based buffer over-read in Exiv2::Image::io function

EPSS

Процентиль: 77%
0.01065
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

CVSS3: 6.5
nvd
больше 8 лет назад

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

CVSS3: 6.5
debian
больше 8 лет назад

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that ...

CVSS3: 6.5
github
больше 3 лет назад

There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service.

suse-cvrf
больше 7 лет назад

Security update for exiv2

EPSS

Процентиль: 77%
0.01065
Низкий

3.3 Low

CVSS3