exiv2 security, bug fix, and enhancement update

exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available Resolves: bz1800472 0.27.2-3 - Fix infinite loop and hang in Jp2Image::readMetadata Resolves: bz1800472 0.27.2-2 Rebuild Resolves: bz1651917 0.27.2...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow in WebPImage::decodeChunks...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists through uncontrolled memory allocation in PngChunk::parseChunkContent allowing an attacker to crash the system via a malicious PNG image...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in CiffComponent::dataLocation function of crwimageint.cpp due to an invalid data location which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in PngImage::readMetadata function of pngimage.cpp due to negative integer overflow which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service DoS. The vulnerability exists through a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service DoS. The vulnerability exists through excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service DoS. The vulnerability exists through an assertion failure in BigTiffImage::readData in bigtiffimage.cpp...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::ul2Data in types.cpp which allows an atccket to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to a denial of service. The vulnerability exists due to a heap-based buffer overflow in Exiv2::d2Data in types.cpp which allows an attacker to crash the application via malicious input...

Buffer Overflow

exiv2 is vulnerable to a buffer overflow in samples/geotag.cpp...

Denial Of Service (DoS)

exiv2 is vulnerable to a null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp...

exiv2: null-pointer dereference in http.c causing denial of service

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service crash due to a NULL pointer dereference by returning a crafted response that lacks a space character...

exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp

In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp called from psdimage.cpp in the PSD image reader may suffer from a denial of service heap-based buffer over-read caused by an integer overflow via a crafted PSD image file...

exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service

A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file...

exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS

A denial of service vulnerability was found in exiv2 in the way JPEG 2000 JP2 metadata was read when processing an image file. A remote attacker could abuse this flaw to create a specially crafted image, causing exiv2 to enter into an infinite loop when processing an incoming malicious image...