CVE-2018-9146

Опубликовано: 28 мар. 2018

Источник: redhat

CVSS3: 3.3

Описание

[REJECTED CVE] An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory.

Отчет

This flaw was found to be a duplicate of CVE-2017-17724. Please see https://access.redhat.com/security/cve/CVE-2017-17724 for information about affected products and security errata.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 6	exiv2	Not affected
Red Hat Enterprise Linux 7	exiv2	Not affected
Red Hat Enterprise Linux 8	exiv2	Not affected

Показывать по

Ссылки на источники

Дополнительная информация

Дефект:

CWE-125

https://bugzilla.redhat.com/show_bug.cgi?id=1564284exiv2: out-of-bounds read in Exiv2::IptcData::printStructure in image.cpp

3.3 Low

CVSS3

Связанные уязвимости

CVE-2018-9146

nvd

почти 8 лет назад

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

3.3 Low

CVSS3