Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-17581

Опубликовано: 28 сент. 2018
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.

РелизСтатусПримечание
bionic

released

0.25-3.1ubuntu0.18.04.2
cosmic

released

0.25-4ubuntu0.1
devel

released

0.25-4ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was released [0.23-1ubuntu2.2]]
esm-infra/bionic

not-affected

0.25-3.1ubuntu0.18.04.2
esm-infra/xenial

not-affected

0.25-2.1ubuntu16.04.3
precise/esm

DNE

trusty

released

0.23-1ubuntu2.2
trusty/esm

DNE

trusty was released [0.23-1ubuntu2.2]
upstream

needs-triage

Показывать по

EPSS

Процентиль: 45%
0.00225
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
почти 7 лет назад

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.

CVSS3: 6.5
nvd
почти 7 лет назад

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.

CVSS3: 6.5
debian
почти 7 лет назад

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has e ...

CVSS3: 6.5
github
около 3 лет назад

CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.

CVSS3: 4.3
fstec
больше 6 лет назад

Уязвимость компонента crwimage_int.cpp библиотеки для управления метаданными медиафайлов Exiv2, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 45%
0.00225
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3