3215 matches found
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2495)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2495)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialize...
Amazon Linux 2 : exiv2 (ALAS-2021-1701)
The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1701 advisory. A flaw was found in exiv2. A flawed bounds checking in the jp2Image.cpp:doWriteMetadata function leads to a heap-based buffer...
Important: exiv2
Issue Overview: A flaw was found in exiv2. A flawed bounds checking in the jp2Image.cpp:doWriteMetadata function leads to a heap-based buffer overflow. This flaw allows an attacker who can provide a malicious image to an application using the exiv2 library, to write data out of bounds and...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2367)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : exiv2 (EulerOS-SA-2021-2367)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read w...
CVE-2020-18899
An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...
CVE-2020-18898
The exiv2 program is susceptible to a stack exhaustion issue via a crafted file. The cause of this vulnerability, is due to a flaw in the code which could allow remote attackers to cause a denial of service DOS. The highest threat from this vulnerability is availability...
CentOS 8 : exiv2 (CESA-2021:3152)
The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3152 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied only on t...
CentOS 8 : compat-exiv2-026 (CESA-2021:3153)
The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:3153 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied only on t...
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2327)
According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read w...
MGASA-2021-0415 Updated exiv2 packages fix security vulnerabilities
The updated exiv2 packages fix security vulnerabilities: An assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a...
Updated exiv2 packages fix security vulnerabilities
The updated exiv2 packages fix security vulnerabilities: An assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2327)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
exiv2:fuzz-read-print-write: Heap-buffer-overflow in Exiv2::StringValueBase::read
Project: https://github.com/Exiv2/exiv2.git Detailed Report: https://oss-fuzz.com/testcase?key=5671177327083520 Project: exiv2 Fuzzing Engine: afl Fuzz Target: fuzz-read-print-write Job Type: aflasanexiv2 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60b0000002b6 Cra...
Debian: Security Advisory (DLA-2750-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2750-1] exiv2 security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2750-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 30, 2021 https://wiki.debian.org/LTS -...
DLA-2750-1 exiv2 - security update
Bulletin has no description...
Debian DLA-2750-1 : exiv2 - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2750 advisory. Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or...