Lucene search
K

8 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:11 a.m.2 views

SUSE CVE-2019-13110

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...

4.3CVSS7.5AI score0.01379EPSS
Exploits1References6
Veracode
Veracode
added 2022/11/25 6:39 a.m.22 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists in the CiffDirectory::readDirectory function of crwimageint.cpp due to integer overflows which allows an attacker to cause an application crash by providing malicious input...

6.5CVSS6.4AI score0.01379EPSS
Exploits1References11Affected Software2
OSV
OSV
added 2019/10/09 7:15 p.m.1 views

AZL-7204 CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

6.5CVSS6.7AI score0.0026EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2019/09/24 12:0 a.m.29 views

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-1995)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEG...

6.5CVSS6.9AI score0.01379EPSS
Exploits1References2
Veracode
Veracode
added 2019/08/08 12:7 a.m.23 views

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists through a stack overflow issue in CiffDirectory::readDirectory at crwimageint.cpp which allows an attacker to crash the application via malicious input...

6.5CVSS7.1AI score0.00252EPSS
Exploits1References40Affected Software4
CNVD
CNVD
added 2018/09/30 12:0 a.m.1 views

Exiv2 Buffer Overflow Vulnerability (CNVD-2018-20550)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...

6.5CVSS6.5AI score0.00252EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/09/28 12:0 a.m.17 views

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.8AI score0.00252EPSS
Exploits1References6
OSV
OSV
added 2018/09/28 12:0 a.m.1 views

UBUNTU-CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

6.5CVSS6.7AI score0.00252EPSS
Exploits1References4
Rows per page
Query Builder