PYSEC-2018-137

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

Heap overflow

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

PYSEC-2018-137

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230

Exiv2 vulnerability CVE-2018-17230 affects Exiv2 0.26: a heap-based buffer overflow in Exiv2::ul2Data (types.cpp) allows remote crafting of an image to cause denial of service. Affected product/version in public advisories is Exiv2 0.26; fixes are in the 0.27.2 line (per multiple advisories). Mit...

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17229

CVE-2018-17229 affects Exiv2 up to v0.26, caused by a heap-based buffer overflow in Exiv2::d2Data (types.cpp) that can be triggered by a crafted image file, enabling remote DoS. Mitigation in the connected advisories is to upgrade to Exiv2 0.27.2 (or later).

CVE-2018-17230

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17229

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

PT-2018-19192

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer overflow, by using a crafted image file. This is related to the Exiv2::d2Data in types.cpp. Recommendations For Exi...

PT-2018-19193

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue allows remote attackers to cause a denial of service, specifically a heap-based buffer overflow, by using a crafted image file. This is related to the Exiv2::ul2Data in types.cpp. Recommendations For...

CVE-2018-17229: Out-of-bounds Write

Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

CVE-2018-17230: Out-of-bounds Write

Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer overflow via a crafted image file...

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The Exiv2::IptcData::printStructure function in iptc.cpp related to the != 0x1c case, is affected with a heap-based over-read which would allow a remote attacker to cause a denial of service condition via a crafted TIFF file...