Логотип exploitDog
bind: "CVE-2021-29473"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2021-29473"

Количество 10

Количество 10

ubuntu логотип

CVE-2021-29473

около 4 лет назад

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 2.5
EPSS: Низкий
redhat логотип

CVE-2021-29473

около 4 лет назад

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-29473

около 4 лет назад

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 2.5
EPSS: Низкий
msrc логотип

CVE-2021-29473

больше 3 лет назад

CVSS3: 2.5
EPSS: Низкий
debian логотип

CVE-2021-29473

около 4 лет назад

Exiv2 is a C++ library and a command-line utility to read, write, dele ...

CVSS3: 2.5
EPSS: Низкий
fstec логотип

BDU:2021-05244

около 4 лет назад

Уязвимость библиотеки для управления метаданными медиафайлов Exiv2, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.1
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4252-1

больше 2 лет назад

Security update for exiv2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4276-1

больше 2 лет назад

Security update for exiv2

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4208-1

больше 2 лет назад

Security update for exiv2-0_26

EPSS: Низкий
redos логотип

ROS-20250110-02

5 месяцев назад

Множественные уязвимости exiv2

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 2.5
0%
Низкий
около 4 лет назад
redhat логотип
CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 7.5
0%
Низкий
около 4 лет назад
nvd логотип
CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security.

CVSS3: 2.5
0%
Низкий
около 4 лет назад
msrc логотип
CVSS3: 2.5
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, dele ...

CVSS3: 2.5
0%
Низкий
около 4 лет назад
fstec логотип
BDU:2021-05244

Уязвимость библиотеки для управления метаданными медиафайлов Exiv2, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 3.1
0%
Низкий
около 4 лет назад
suse-cvrf логотип
SUSE-SU-2022:4252-1

Security update for exiv2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4276-1

Security update for exiv2

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4208-1

Security update for exiv2-0_26

больше 2 лет назад
redos логотип
ROS-20250110-02

Множественные уязвимости exiv2

CVSS3: 8.8
5 месяцев назад

Уязвимостей на страницу