Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-5043-1
HistoryAug 17, 2021 - 12:00 a.m.

Exiv2 vulnerabilities

2021-08-1700:00:00
ubuntu.com
87

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Releases

  • Ubuntu 21.04
  • Ubuntu 20.04 LTS
  • Ubuntu 18.04 ESM
  • Ubuntu 16.04 ESM

Packages

  • exiv2 - EXIF/IPTC/XMP metadata manipulation tool

Details

It was discovered that Exiv2 incorrectly handled certain image files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2021-32815, CVE-2021-34334, CVE-2021-37620, CVE-2021-37622)

It was discovered that Exiv2 incorrectly handled certain image files.
An attacker could possibly use this issue to cause a denial of service.
These issues only affected Ubuntu 20.04 LTS and Ubuntu 21.04.
(CVE-2021-34335, CVE-2021-37615, CVE-2021-37616, CVE-2021-37618,
CVE-2021-37619, CVE-2021-37621, CVE-2021-37623)

OSVersionArchitecturePackageVersionFilename
Ubuntu21.04noarchlibexiv2-27< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu21.04noarchexiv2< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu21.04noarchexiv2-dbgsym< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu21.04noarchlibexiv2-27-dbgsym< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu21.04noarchlibexiv2-dev< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu21.04noarchlibexiv2-doc< 0.27.3-3ubuntu1.5UNKNOWN
Ubuntu20.04noarchlibexiv2-27< 0.27.2-8ubuntu2.6UNKNOWN
Ubuntu20.04noarchexiv2< 0.27.2-8ubuntu2.6UNKNOWN
Ubuntu20.04noarchexiv2-dbgsym< 0.27.2-8ubuntu2.6UNKNOWN
Ubuntu20.04noarchlibexiv2-27-dbgsym< 0.27.2-8ubuntu2.6UNKNOWN
Rows per page:
1-10 of 261

Related

osv 18
openvas 15
nessus 25
mageia 1
fedora 2
gentoo 1
oraclelinux 1
redhat 2
rocky 2
almalinux 2
suse 3
debiancve 11
cve 11
redhatcve 11
cvelist 11
alpinelinux 11
ubuntucve 11
prion 11
cnvd 11
cbl_mariner 11
veracode 1
github 1
ubuntu 1
debian 1
osv
osv
exiv2 vulnerabilities
2021-08-17 17:31:32
Moderate: compat-exiv2-026 security update
2021-11-09 09:00:36
Moderate: compat-exiv2-026 security update
2021-11-09 09:00:36
openvas
openvas
Ubuntu: Security Advisory (USN-5043-1)
2021-08-18 00:00:00
Mageia: Security Advisory (MGASA-2021-0415)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2628)
2021-11-03 00:00:00
nessus
nessus
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Exiv2 vulnerabilities (USN-5043-1)
2021-08-17 00:00:00
EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2021-2628)
2021-11-02 00:00:00
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2657)
2021-11-11 00:00:00
mageia
mageia
Updated exiv2 packages fix security vulnerabilities
2021-09-04 20:01:38
fedora
fedora
[SECURITY] Fedora 33 Update: mingw-exiv2-0.27.4-3.fc33
2021-08-20 01:10:18
[SECURITY] Fedora 34 Update: mingw-exiv2-0.27.4-3.fc34
2021-08-20 01:21:16
gentoo
gentoo
Exiv2: Multiple Vulnerabilities
2023-12-22 00:00:00
oraclelinux
oraclelinux
compat-exiv2-026 security update
2021-11-16 00:00:00
redhat
redhat
(RHSA-2021:4319) Moderate: compat-exiv2-026 security update
2021-11-09 09:00:36
(RHSA-2021:4173) Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
rocky
rocky
compat-exiv2-026 security update
2021-11-09 09:00:36
exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
almalinux
almalinux
Moderate: compat-exiv2-026 security update
2021-11-09 09:00:36
Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
suse
suse
Security update for exiv2 (important)
2022-11-07 00:00:00
Security update for exiv2 (important)
2022-10-17 00:00:00
Security update for exiv2 (moderate)
2022-11-07 00:00:00
debiancve
debiancve
CVE-2021-37615
2021-08-09 20:15:00
CVE-2021-37623
2021-08-09 18:15:00
CVE-2021-32815
2021-08-09 18:15:00
cve
cve
CVE-2021-37615
2021-08-09 20:15:00
CVE-2021-34335
2021-08-09 20:15:00
CVE-2021-37619
2021-08-09 19:15:00
redhatcve
redhatcve
CVE-2021-37615
2021-08-10 18:34:22
CVE-2021-37621
2021-08-10 17:52:11
CVE-2021-37620
2021-08-10 17:51:57
cvelist
cvelist
CVE-2021-37622 Denial of service due to infinite loop in JpegBase::printStructure (#1)
2021-08-09 00:00:00
CVE-2021-37615 Null pointer dereference in Exiv2::Internal::resolveLens0x319
2021-08-09 00:00:00
CVE-2021-37619 Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
2021-08-09 00:00:00
alpinelinux
alpinelinux
CVE-2021-37616
2021-08-09 19:15:00
CVE-2021-34335
2021-08-09 20:15:00
CVE-2021-37619
2021-08-09 19:15:00
ubuntucve
ubuntucve
CVE-2021-37616
2021-08-09 00:00:00
CVE-2021-37623
2021-08-09 00:00:00
CVE-2021-37619
2021-08-09 00:00:00
prion
prion
Design/Logic Flaw
2021-08-09 20:15:00
Code injection
2021-08-09 19:15:00
Null pointer dereference
2021-08-09 20:15:00
cnvd
cnvd
Exiv2 has an unspecified vulnerability (CNVD-2021-61797)
2021-08-10 00:00:00
Exiv2 Infinite Loop Vulnerability (CNVD-2021-61796)
2021-08-10 00:00:00
Exiv2 out-of-bounds read vulnerability (CNVD-2021-61439)
2021-08-10 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-37615 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
CVE-2021-37622 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
CVE-2021-37621 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
veracode
veracode
Denial Of Service (DoS)
2021-10-23 08:12:34
github
github
Blue-teaming for Exiv2: three rules of bug fixing for better OSS security
2021-11-09 18:00:46
ubuntu
ubuntu
Exiv2 regression
2022-01-11 00:00:00
debian
debian
[SECURITY] [DLA 3265-1] exiv2 security update
2023-01-10 17:03:19

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON
Related for USN-5043-1
osv18openvas15nessus25mageia1fedora2gentoo1oraclelinux1redhat2rocky2almalinux2suse3debiancve11cve11redhatcve11cvelist11alpinelinux11ubuntucve11prion11cnvd11cbl_mariner11veracode1github1ubuntu1debian1