CentOS 8 : exiv2 (CESA-2020:1577)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1577 advisory. - exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service CVE-2019-9143 - exiv2: null pointer...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a flaw in TiffImageEntry::doWriteImage of pValue which allows an attacker to crash the application by tricking a user into opening a malicious tiff file...

RHEL 8 : exiv2 (RHSA-2020:1577)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1577 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...

Amazon Linux 2 : exiv2 (ALAS-2020-1512)

The version of exiv2 installed on the remote host is prior to 0.27.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1512 advisory. An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exi...

Low: exiv2

Issue Overview: An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exiv2 library to parse untrusted images may be vulnerable to this flaw, which could be used by an attacker to extract data from the application's memory...

Scientific Linux Security Update : exiv2 on SL7.x x86_64 (20201001)

Security Fixes : - exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check CVE-2019-17402 C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid141707; scriptversion"1.3";...

exiv2 security update

CentOS Errata and Security Advisory CESA-2020:4030 An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CentOS 7 : exiv2 (RHSA-2020:4030)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4030 advisory. - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in...

exiv2 security update

0.27.0-3 - Validate relationship of the total size to the offset to avoid crash Resolves: bz1775695...

Low: Red Hat Security Advisory: exiv2 security update

An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check

An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exiv2 library to parse untrusted images may be vulnerable to this flaw, which could be used by an attacker to extract data from the application's memory or make it cras...

RHEL 7 : exiv2 (RHSA-2020:4030)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4030 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. Security...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2020-1844)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2020-1844)

According to the version of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the...

The vulnerability of component http.c in the Exiv2 metadata management library, which allows a hacker to cause a service failure.

The vulnerability of the http.c component in the Exiv2 metadata management library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures through the use of a speciall...

The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...

The vulnerability of the Exiv2 metadata management library, related to insufficient validation of input data, allows a hacker to trigger a service failure.

The vulnerability of the Exiv2 media metadata management library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through the use of a specially created CRW file...

Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...

MGASA-2020-0196 Updated exiv2 packages fix security vulnerability

The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...