[SECURITY] Fedora 30 Update: exiv2-0.27.2-1.fc30

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted value s, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

PT-2019-6195

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.1 Description A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 leads to a denial of service. The vulnerability is related to copying a buffer without checking the input data, allowing a remote...

Fedora Update for exiv2 FEDORA-2019-60553d5a18

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a flaw in Exiv2::Internal::stringFormat in image.cpp which allows an attacker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists due to a flaw in Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp which allows an attacker to crash the application via malicious input...

Out-of-Bounds Read

exiv2 is vulnerable to out of bounds read. It is due to a flaw in IptcData::printStructure in iptc.c. which allows an attcker to crash the application via malicious input...

Denial Of Service (DoS)

exiv2 is vulnerable to heap-based buffer over-read. It is due to a flaw in PngChunk::readRawProfile in pngchunkint.cpp...

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists through a stack overflow issue in CiffDirectory::readDirectory at crwimageint.cpp which allows an attacker to crash the application via malicious input...

Buffer Overflows

Exiv2 is vulnerable to buffer overflows. It is due to lack of proper memory handling in WebPImage::decodeChunks in webpimage.cpp...

Information Leak

exiv2 is vulnerable to information leak. An attacker can send a malicious file to Exiv2::PngImage::printStructure function in pngimage.cpp to trigger the attack...

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service DoS. The Exiv2::DataValue::copy in value.cpp causes a null pointer dereference when a malicious input is provided, causing an application crash...

exiv2: invalid memory access in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp

In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmnint.cpp allows remote attackers to cause a denial of service invalid memory access via a crafted file...

exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service

An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service Segmentation fault or possibly have unspecified other impact...

exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp...

exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

exiv2: heap-buffer-overflow in Exiv2::IptcData::printStructure in src/iptc.cpp

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image. By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory...

exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...

exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...