Lucene search
+L

2691 matches found

Ubuntu
Ubuntu
added 2021/08/02 4:03 p.m.158 views

USN-5028-1: Exiv2 vulnerability

It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service...

6.6AI score
SaveExploits0
OSV
OSV
added 2021/08/02 4:03 p.m.7 views

USN-5028-1 exiv2 vulnerability

It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service...

6.6AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2021/08/02 8:49 a.m.62 views

CVE-2020-19716

There's a flaw in exiv2. An attacker able to submit a crafted file to an application linked with exiv2 could trigger excessive resource consumption or a null pointer dereference, leading to an impact to application availability...

6.5CVSS2.5AI score0.0114EPSS
SaveExploits0References3
Fedora
Fedora
added 2021/08/02 1:07 a.m.43 views

[SECURITY] Fedora 33 Update: mingw-exiv2-0.27.4-2.fc33

MinGW Windows exiv2 library...

7.8CVSS2.6AI score0.01499EPSS
SaveExploits0
Fedora
Fedora
added 2021/08/02 1:05 a.m.36 views

[SECURITY] Fedora 34 Update: mingw-exiv2-0.27.4-2.fc34

MinGW Windows exiv2 library...

7.8CVSS2.6AI score0.01499EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2021/08/02 12:00 a.m.22 views

Fedora: Security Advisory for mingw-exiv2 (FEDORA-2021-0b27f220bd)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/08/02 12:00 a.m.29 views

Fedora: Security Advisory for mingw-exiv2 (FEDORA-2021-dde4d7d47e)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5AI score
SaveExploits0References2
Veracode
Veracode
added 2021/07/27 5:39 a.m.11 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. A heap-based buffer overflow in Exiv2::Internal::CrwMap::encode allows an attacker to cause an application crash...

7.5CVSS6.8AI score0.02555EPSS
SaveExploits1References9Affected Software3
CNVD
CNVD
added 2021/07/27 12:00 a.m.23 views

Exiv2 Heap Buffer Overflow Vulnerability (CNVD-2021-62190)

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. jp2image.cpp in Exiv2 version 0.27.3 is vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

5AI score
SaveExploits0References1
CNVD
CNVD
added 2021/07/27 12:00 a.m.34 views

Exiv2 integer overflow vulnerability (CNVD-2021-62191)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An integer overflow vulnerability exists in CrwMap::encode0x1810 in Exiv2 version 0.27.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

7.5CVSS7.3AI score0.02555EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/26 5:15 p.m.28 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS0.02555EPSS
SaveExploits1References6
OSV
OSV
added 2021/07/26 5:15 p.m.33 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS7.5AI score
SaveExploits0References6
OSV
OSV
added 2021/07/26 5:15 p.m.4 views

DEBIAN-CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS6.7AI score0.02555EPSS
SaveExploits1References1
PyPA
PyPA
added 2021/07/26 5:15 p.m.12 views

PYSEC-2021-877

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS7.2AI score0.02555EPSS
SaveExploits1References8Affected Software1
OSV
OSV
added 2021/07/26 5:15 p.m.33 views

PYSEC-2021-877

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS7.5AI score0.02555EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2021/07/26 5:15 p.m.30 views

CVE-2021-31291

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

6.7AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/07/26 5:15 p.m.6 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS6.7AI score0.02555EPSS
SaveExploits1References9
Prion
Prion
added 2021/07/26 5:15 p.m.30 views

Integer overflow

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

5CVSS7.2AI score0.02555EPSS
SaveExploits1References6Affected Software3
UbuntuCve
UbuntuCve
added 2021/07/26 5:15 p.m.41 views

CVE-2021-31292

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS via crafted metadata...

7.5CVSS6.9AI score0.02555EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/07/26 12:00 a.m.7 views

编号撤回

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. jp2image.cpp in Exiv2 version 0.27.3 is vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

6.9AI score
SaveExploits0
Rows per page
Query Builder