USN-8103-2: Exiv2 regression

USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Exiv2 did not correctly handle...

Linux Distros Unpatched Vulnerability : CVE-2020-18899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted...

SUSE CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

creationtimestamp| type| source ---|---|--- 2021-08-20 02:18:25+00:00| seen| https://t.me/cibsecurity/27628...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18899

Exiv2 CVE-2020-18899 is a memory-allocation (DOS) vulnerability affecting Exiv2 0.27.x by crafting input that triggers uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)). Public sources in connected documents confirm the issue and indicate remediation by upgrading to Exiv2 0...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...