Описание
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
There's a flaw in exiv2. An attacker able to submit a crafted file to an application linked with exiv2 could trigger excessive resource consumption or a null pointer dereference, leading to an impact to application availability.
Отчет
This flaw does not affect exiv2 as shipped with Red Hat Enterprise Linux 8; the fix is already applied. This flaw is out of support scope for exiv2 as shipped with Red Hat Enterprise Linux 7, and did not reproduce on it.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | exiv2 | Out of support scope | ||
| Red Hat Enterprise Linux 7 | exiv2 | Out of support scope | ||
| Red Hat Enterprise Linux 8 | exiv2 | Not affected | ||
| Red Hat Enterprise Linux 9 | exiv2 | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
6.5 Medium
CVSS3
Связанные уязвимости
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
A buffer overflow vulnerability in the Databuf function in types.cpp o ...
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
Уязвимость функции Databuf компонента types.cpp библиотеки для управления метаданными медиафайлов Exiv2, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
6.5 Medium
CVSS3