CVE-2018-17282

Опубликовано: 20 сент. 2018

Источник: redhat

CVSS3: 3.3

EPSS Низкий

Описание

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

Отчет

This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 prior to 7.5 as they did not include the vulnerable code.

Затронутые пакеты

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	exiv2	Not affected
Red Hat Enterprise Linux 7	exiv2	Fixed	RHSA-2019:2101	06.08.2019
Red Hat Enterprise Linux 8	exiv2	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gegl	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	gnome-color-manager	Fixed	RHSA-2020:1577	28.04.2020
Red Hat Enterprise Linux 8	libgexiv2	Fixed	RHSA-2020:1577	28.04.2020

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

Дефект:

CWE-476

https://bugzilla.redhat.com/show_bug.cgi?id=1632490exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash

EPSS

Процентиль: 67%

0.00548

Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVE-2018-17282

CVSS3: 6.5

ubuntu

почти 7 лет назад

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

CVE-2018-17282

CVSS3: 6.5

nvd

почти 7 лет назад

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

CVE-2018-17282

CVSS3: 6.5

debian

почти 7 лет назад

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue: ...

GHSA-38gv-cwr5-whgg

CVSS3: 6.5

github

около 3 лет назад

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

openSUSE-SU-2020:0482-1

suse-cvrf

больше 5 лет назад

Security update for exiv2

EPSS

Процентиль: 67%

0.00548

Низкий

3.3 Low

CVSS3