CLEANSTART-2024-EI35625 CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0

Security vulnerability affects the exiv2 package. A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0...

Rocky Linux 8 [CIQ] Security Update: exiv2 / exiv2-debuginfo / exiv2-debugsource / exiv2-devel / etc (crlsa-2021_1758)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211758 advisory. exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check CVE-2019-17402 Tenable has extracted the preceding description block directly fr...

SUSE CVE-2019-13110

A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The vulnerability exists in the CiffDirectory::readDirectory function of crwimageint.cpp due to integer overflows which allows an attacker to cause an application crash by providing malicious input...

Exiv2 Heap Buffer Overflow DoS

The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

AZL-7204 CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-1995)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEG...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists through a stack overflow issue in CiffDirectory::readDirectory at crwimageint.cpp which allows an attacker to crash the application via malicious input...

Exiv2 Buffer Overflow Vulnerability (CNVD-2018-20550)

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

UBUNTU-CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

CVE-2018-17581: Uncontrolled Resource Consumption

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

CVE-2018-17581

CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...

PT-2018-19195

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to excessive stack consumption due to a recursive function in CiffDirectory::readDirectory at crwimage int.cpp, leading to a denial of service. Recommendations For Exiv2 version 0.26, conside...