Lucene search

[email protected]CVE-2021-32815

HistoryAug 09, 2021 - 6:15 p.m.

CVE-2021-32815

2021-08-0918:15:07

CWE-617

[email protected]

web.nvd.nist.gov

123

exiv2

cve-2021-32815

image files

metadata

denial of service

security vulnerability

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

CPE configuration

Vulners

NVD

exiv2exiv2Range<0.27.5

VendorProductVersionCPE
exiv2exiv2*cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
exiv2	exiv2	*	cpe:2.3:a:exiv2:exiv2::::::::

CNA Affected

[
  {
    "vendor": "Exiv2",
    "product": "exiv2",
    "versions": [
      {
        "version": "< 0.27.5",
        "status": "affected"
      }
    ]
  }
]

References

github.com/Exiv2/exiv2/pull/1739

github.com/Exiv2/exiv2/security/advisories/GHSA-mv9g-fxh2-m49m

lists.debian.org/debian-lts-announce/2023/01/msg00004.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FMDT4PJB7P43WSOM3TRQIY3J33BAFVVE/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UYGDELIFFJWKUU7SO3QATCIXCZJERGAC/

security.gentoo.org/glsa/202312-06

Social References