PT-2021-4547

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.27.4-RC1 Description The issue is related to the Jp2Image::readMetadata function in the jp2image.cpp component of the Exiv2 library, which is used for managing media file metadata. The problem arises from improper inp...

Exiv2 缓冲区错误漏洞

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. Exiv2 suffers from a heap buffer overflow vulnerability. The vulnerability stems from improper validation of input to the rawData.size property in Jp2Image::readMetadata in jp2image.cpp. An attacker could...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-1674)

According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1674)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to infinite loop execution, allowing attackers to cause service interruptions.

The vulnerability of the Exiv2::PsdImage::readMetadata function in the psdimage.cpp file of the Exiv2 metadata management library is related to improper processing of PSD files. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Exiv2::DataValue::read function in the value.cpp library for managing Exiv2 media metadata allows a perpetrator to cause service failure.

The vulnerability of the Exiv2::DataValue::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the `Exiv2::StringValueBase::read` function in the `value.cpp` library of the Exiv2 media metadata management library is related to the issue of allowing the operation to exit within acceptable buffer limits. This allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::StringValueBase::read function in the value.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the `Internal::TiffReader::visitDirectory` function in the `tiffvisitor.cpp` file of the Exiv2 media metadata management library, related to the insufficient use of the `assert()` function, allows a malicious actor to cause service failures.

The vulnerability of the Internal::TiffReader::visitDirectory function in the tiffvisitor.cpp file of the Exiv2 media metadata management library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Exiv2::getULong function in types.cpp of the Exiv2 metadata management library, which is related to the operation returning values within the allowable buffer size, allows a malicious actor to cause a service failure.

The vulnerability of the Exiv2::getULong function in the types.cpp library of the Exiv2 media metadata management library is related to incorrect memory address manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability in the `Exiv2::IptcParser::decode` function of the `iptc.cpp` file in the media metadata management library Exiv2, related to integer overflow, allows attackers to cause service interruptions.

The vulnerability in the Exiv2::IptcParser::decode function of the iptc.cpp file in the media metadata management library Exiv2 is related to incorrect processing of PSD files. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Exiv2::ValueType function in the Exiv2 media file metadata management library allows a attacker to cause a service failure.

The vulnerability of the Exiv2::ValueType function in the Exiv2 metadata management library is related to incorrect exception handling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Jp2Image::readMetadata() function in the jp2image.cpp file of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the Jp2Image::readMetadata function in the jp2image.cpp file of the Exiv2 media metadata management library is related to incorrect handling of the input file. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Vulnerability of the PngChunk::readRawProfile function in the pngchunk_int.cpp file of the Exiv2 media metadata management library, allowing a hacker to cause a service failure

The vulnerability of the PngChunk::readRawProfile function in the pngchunkint.cpp file of the Exiv2 media metadata management library is related to incorrect processing of PNG files. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

EulerOS Virtualization 3.0.6.6 : exiv2 (EulerOS-SA-2021-1470)

According to the version of the exiv2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-1470)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 8 : exiv2 (CESA-2020:1577)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1577 advisory. - exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service CVE-2019-9143 - exiv2: null pointer...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a flaw in TiffImageEntry::doWriteImage of pValue which allows an attacker to crash the application by tricking a user into opening a malicious tiff file...

RHEL 8 : exiv2 (RHSA-2020:1577)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1577 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. The...

Amazon Linux 2 : exiv2 (ALAS-2020-1512)

The version of exiv2 installed on the remote host is prior to 0.27.0-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1512 advisory. An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exi...

Low: exiv2

Issue Overview: An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exiv2 library to parse untrusted images may be vulnerable to this flaw, which could be used by an attacker to extract data from the application's memory...