Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds read in Exiv2...

Information Disclosure

Exiv2 is vulnerable to information disclosure. The read of uninitialized memory is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to leak a few bytes of stack memory, if they can trick the victim into running Exiv...

[SECURITY] Fedora 34 Update: exiv2-0.27.3-7.fc34

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

Oracle Linux 8 : exiv2 (ELSA-2021-1758)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-1758 advisory. 0.27.3-2 - Avoid duplicating Changelog file Resolves: bz1880984 0.27.3-1 - Update to 0.27.3 Resolves: bz1880984 Tenable has extracted the preceding description...

Ubuntu: Security Advisory (USN-4964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-4964-1 exiv2 vulnerabilities

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. CVE-2021-29463 It was discovered that Exiv2 incorrectly handled certain files. An...

USN-4964-1: Exiv2 vulnerabilities

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. CVE-2021-29463 It was discovered that Exiv2 incorrectly handled certain files. An...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS : Exiv2 vulnerabilities (USN-4964-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4964-1 advisory. It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of...

exiv2 security, bug fix, and enhancement update

0.27.3-2 - Avoid duplicating Changelog file Resolves: bz1880984 0.27.3-1 - Update to 0.27.3 Resolves: bz1880984...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. An out-of-bounds read occurs when writing metadata into a malicious image file. An attacker is able to cause a denial of service by tricking the victim into running Exiv2 on a malicious image file...

CVE-2021-32617

There's a flaw in the xmpsdk component shipped with exiv2. An attacker who is able to submit a crafted file to be processed by an application linked with the exiv2 library could cause an excessive consumption of resources, potentially leading to denial of service. The greatest impact of this flaw...

CVE-2021-29623

There's a flaw in exiv2's isWebPType function. An attacker who submits a crafted file to be processed by an application linked with exiv2 could trigger an out-of-bounds read of unitialized memory, saving it to the stack. The great impact of this flaw is most likely to application availability wit...

RHEL 8 : exiv2 (RHSA-2021:1758)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1758 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The followin...

exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check

An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exiv2 library to parse untrusted images may be vulnerable to this flaw, which could be used by an attacker to extract data from the application's memory or make it cras...

Low: Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update

An update for exiv2 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

RLSA-2021:1758 Low: exiv2 security, bug fix, and enhancement update

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.3. BZ1880984 Security Fixes: exiv2: out-of-bounds read in...

Low: exiv2 security, bug fix, and enhancement update

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.3. BZ1880984 Security Fixes: exiv2: out-of-bounds read in...

exiv2 security, bug fix, and enhancement update

An update is available for exiv2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The exiv2 packages provide a command line utility which can display and...

ALSA-2021:1758 Low: exiv2 security, bug fix, and enhancement update

The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The following packages have been upgraded to a later upstream version: exiv2 0.27.3. BZ1880984 Security Fixes: exiv2: out-of-bounds read in...

Exiv2 Resource Management Error Vulnerability (CNVD-2021-37597)

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A resource management error vulnerability exists in Exiv2 versions prior to 0.27.4 . An attacker could exploit this vulnerability via specially crafted image files to cause a denial of service...