Updated exiv2 packages fix security vulnerabilities & bugs

🗓️ 30 Oct 2017 19:23:17Reported by Gentoo FoundationType

mageia

mageia🔗 advisories.mageia.org👁 44 Views

Updated exiv2 packages fix security vulnerabilities & bug

Reporter	Title	Published	Views	Family All 321
AstraLinux	Astra Linux - уязвимость в exiv2	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в exiv2	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в exiv2	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в exiv2	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux – Vulnerability in exiv2	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the Exiv2::getULong function in types.cpp of the Exiv2 metadata management library, which is related to the operation returning values within the allowable buffer size, allows a malicious actor to cause a service failure.	21 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `Exiv2::StringValueBase::read` function in the `value.cpp` library of the Exiv2 media metadata management library is related to the issue of allowing the operation to exit within acceptable buffer limits. This allows a malicious actor to cause a service failure.	21 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Exiv2::ValueType function in the Exiv2 media file metadata management library allows a attacker to cause a service failure.	21 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the `Internal::TiffReader::visitDirectory` function in the `tiffvisitor.cpp` file of the Exiv2 media metadata management library, related to the insufficient use of the `assert()` function, allows a malicious actor to cause service failures.	21 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Exiv2::DataValue::read function in the value.cpp library for managing Exiv2 media metadata allows a perpetrator to cause service failure.	21 Mar 202100:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Mageia	5	any	exiv2	0.24-5.2	exiv2-0.24-5.2.noarch.rpm
Mageia	6	any	exiv2	0.26-2.2	exiv2-0.26-2.2.noarch.rpm

Source	Link
bugs	www.bugs.mageia.org/show_bug.cgi
bugs	www.bugs.mageia.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2017/06/30/1

24 Oct 2017 20:09Current

2.1Low risk

Vulners AI Score2.1

CVSS 26.8

CVSS 38.8

CVSS 3.17.5

EPSS0.01388

exiv2 security vulnerabilities bugfix pentax cameras gwenview heap overflow invalid free segmentation fault illegal address access floating point exception heap-based buffer overflow reachable assertion bad free invalid memory address