Lucene search
K

9 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.5 views

SUSE CVE-2019-13110

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...

4.3CVSS7.5AI score0.01925EPSS
Exploits1References6
Veracode
Veracode
added 2022/11/25 6:39 a.m.24 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists in the CiffDirectory::readDirectory function of crwimageint.cpp due to integer overflows which allows an attacker to cause an application crash by providing malicious input...

6.5CVSS6.4AI score0.01925EPSS
Exploits1References11Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/05/29 12:0 a.m.5 views

The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

7.8CVSS6.7AI score0.01925EPSS
Exploits1References10Affected Software6
OSV
OSV
added 2019/10/09 7:15 p.m.5 views

AZL-7204 CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

6.5CVSS6.7AI score0.01851EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/09/24 12:0 a.m.31 views

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-1995)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEG...

6.5CVSS6.9AI score0.01925EPSS
Exploits1References2
Veracode
Veracode
added 2019/08/08 12:7 a.m.25 views

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists through a stack overflow issue in CiffDirectory::readDirectory at crwimageint.cpp which allows an attacker to crash the application via malicious input...

6.5CVSS7.1AI score0.0235EPSS
Exploits1References40Affected Software4
CNVD
CNVD
added 2018/09/30 12:0 a.m.2 views

Exiv2 Buffer Overflow Vulnerability (CNVD-2018-20550)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...

6.5CVSS6.5AI score0.0235EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/28 12:0 a.m.21 views

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.8AI score0.0235EPSS
Exploits1References6
OSV
OSV
added 2018/09/28 12:0 a.m.2 views

UBUNTU-CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.5CVSS6.7AI score0.0235EPSS
Exploits1References4
Rows per page
Query Builder