CVE-2018-10772

Опубликовано: 12 апр. 2018

Источник: redhat

CVSS3: 4.3

Описание

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	exiv2	Not affected
Red Hat Enterprise Linux 7	exiv2	Fixed	RHSA-2019:2101	06.08.2019
Red Hat Enterprise Linux 8	exiv2	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gegl	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gnome-color-manager	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	libgexiv2	Fixed	RHSA-2020:1577	28.04.2020

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-400

https://bugzilla.redhat.com/show_bug.cgi?id=1594627exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

4.3 Medium

CVSS3

Связанные уязвимости

CVE-2018-10772

CVSS3: 6.5

ubuntu

больше 7 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVE-2018-10772

CVSS3: 6.5

nvd

больше 7 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

CVE-2018-10772

CVSS3: 6.5

debian

больше 7 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allow ...

GHSA-6g7p-q9ph-fpw6

CVSS3: 6.5

github

больше 3 лет назад

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted file.

SUSE-SU-2022:3598-1

suse-cvrf

около 3 лет назад

Security update for exiv2

4.3 Medium

CVSS3