CVE-2018-17229

Опубликовано: 17 сент. 2018

Источник: redhat

CVSS3: 3.3

Описание

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and 7 as they did not include the vulnerable code.

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	exiv2	Not affected
Red Hat Enterprise Linux 7	exiv2	Not affected
Red Hat Enterprise Linux 8	exiv2	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gegl	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gnome-color-manager	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	libgexiv2	Fixed	RHSA-2020:1577	28.04.2020

Показывать по

Статус:

Low

Дефект:

CWE-122

https://bugzilla.redhat.com/show_bug.cgi?id=1632481exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp

3.3 Low

CVSS3

CVE-2018-17229

CVSS3: 6.5

ubuntu

почти 7 лет назад

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

CVE-2018-17229

CVSS3: 6.5

nvd

почти 7 лет назад

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

CVE-2018-17229

CVSS3: 6.5

debian

почти 7 лет назад

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to c ...

GHSA-m3fr-3g6g-rc8x

CVSS3: 6.5

github

около 3 лет назад

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.

openSUSE-SU-2020:0482-1

suse-cvrf

больше 5 лет назад

Security update for exiv2

3.3 Low

CVSS3