CVE-2018-20098

CVE-2018-20098 affects Exiv2 (JP2/JP2Image::encodeJp2Header) where a crafted input causes a heap-based buffer over-read, leading to a remote denial of service. The initial description identifies Exiv2 0.27-RC3 as vulnerable; connected advisories (MiracleLinux, RockyLinux, Oracle/SUSE updates) enu...

CVE-2018-20099

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20098

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20097: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20099: Loop with Unreachable Exit Condition

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20096: Out-of-bounds Read

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20098: Out-of-bounds Read

There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20097

CVE-2018-20097 affects Exiv2 0.27-RC3, where a crafted input can trigger a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups in tiffimage_int.cpp, leading to remote denial of service. The connected documents confirm the vulnerable component and the DoS impact via crafted image data, wi...

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

CVE-2018-20097

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimageint.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

PT-2018-15256

Name of the Vulnerable Software and Affected Versions Exiv2 versions 0.27-RC3 Description A heap-based buffer over-read issue exists in the Exiv2::tEXtToDataBuf function of pngimage.cpp. This can be exploited by a crafted input, leading to a remote denial of service attack. Recommendations For...

PT-2018-15258 · Exiv2 +5 · Exiv2 +5

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: The issue is related to an infinite loop in the encodeJp2Header function of jp2image.cpp. A crafted input can cause a remote denial of service attack. Recommendations: For Exiv2 version 0.27-RC3, consider...

PT-2018-15257 · Exiv2 +5 · Exiv2 +5

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27-RC3 Description: A heap-based buffer over-read issue exists in the encodeJp2Header function of jp2image.cpp. This can be triggered by a crafted input, potentially leading to a remote denial of service attack. Recommendation...

CVE-2018-19607

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2018-19535

In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunkint.cpp may cause a denial of service application crash due to a heap-based buffer over-read via a crafted PNG file...

CVE-2018-19607

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

Null pointer dereference

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...

CVE-2018-19607

Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...