Lucene search
+L

3217 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/13 12:00 a.m.•6 views

CVE-2018-12264: Out-of-bounds Read

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

8.8CVSS6.6AI score0.02891EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2018/06/13 12:00 a.m.•18 views

UBUNTU-CVE-2018-12264

Exiv2 0.26 has integer overflows in LoaderTiff::getData in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp...

8.8CVSS6.7AI score0.02891EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2018/06/13 12:00 a.m.•5 views

PT-2018-3154

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is caused by an integer overflow in the LoaderExifJpeg class, leading to an out-of-bounds read. This can potentially allow a remote attacker to execute arbitrary code. The out-of-bounds read occurs in t...

10CVSS0.02891EPSS
SaveExploits1References59
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/13 12:00 a.m.•6 views

CVE-2018-12265: Out-of-bounds Read

Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp...

8.8CVSS6.7AI score0.02891EPSS
SaveExploits1References3
Veracode
Veracode
•added 2018/06/01 5:18 a.m.•19 views

Denial Of Service (DoS) Through Stack Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through stack-based buffer overflow attacks. The vulnerability exists in Exiv2::Internal::stringFormat of image.cpp where a malicious image could cause a stack-based buffer overflow which leads to a DoS attack...

5.5CVSS5.5AI score0.00963EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
•added 2018/06/01 5:07 a.m.•23 views

Denial Of Service (DoS) Through Heap Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in basicio.cpp which causes an out-of-bounds write in Exiv2::Image::printIFDStructure and leads to a DoS attack, and possibly other attacks...

6.7AI score
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2018/06/01 4:57 a.m.•38 views

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory dereference attacks. The vulnerability exists in Exiv2::getULong in types.cpp where parsing an image with invalid exif values would cause a denial of service DoS...

5.5CVSS6.1AI score0.01071EPSS
SaveExploits1References7Affected Software2
Veracode
Veracode
•added 2018/06/01 4:53 a.m.•48 views

Invalid Memory Dereference

libexiv2.so is vulnerable to invalid memory address dereference attacks. The vulnerability exists in Exiv2::StringValueBase::read of value.cpp while parsing an image with malicious exif values, causing a denial of service DoS attack...

5.5CVSS6.1AI score0.01071EPSS
SaveExploits1References6Affected Software2
RedhatCVE
RedhatCVE
•added 2018/05/31 8:18 p.m.•37 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS3.9AI score0.02914EPSS
SaveExploits1References1
Prion
Prion
•added 2018/05/29 7:29 a.m.•34 views

Heap overflow

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

7.5CVSS9.6AI score0.02914EPSS
SaveExploits1References5Affected Software3
NVD
NVD
•added 2018/05/29 7:29 a.m.•21 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS7.1AI score0.02914EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2018/05/29 7:29 a.m.•35 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS9.9AI score
SaveExploits0References5
osv_debian
osv_debian
•added 2018/05/29 7:29 a.m.•10 views

DEBIAN-CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS9.6AI score0.02914EPSS
SaveExploits1References1
PyPA
PyPA
•added 2018/05/29 7:29 a.m.•12 views

PYSEC-2018-130

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS7.5AI score0.02914EPSS
SaveExploits1References7Affected Software1
osv_pysec
osv_pysec
•added 2018/05/29 7:29 a.m.•20 views

PYSEC-2018-130

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS7.6AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2018/05/29 7:00 a.m.•52 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS9.3AI score0.02914EPSS
SaveExploits1
CVE
CVE
•added 2018/05/29 7:00 a.m.•173 views

CVE-2018-11531

CVE-2018-11531 affects Exiv2 0.26 and is described as a heap-based buffer overflow in Exiv2’s getData implemented in preview.cpp. The entry lists CVSS: v2 base 7.5 (HIGH) and CVSS:3.0 base 9.8 (CRITICAL) with NETWORK attack, no authentication/UI. The provided documents do not specify a patch vers...

9.8CVSS7AI score0.02914EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2018/05/29 7:00 a.m.•52 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

6.8AI score0.02914EPSS
SaveExploits1References5
Mend
Mend
•added 2018/05/29 7:00 a.m.•4 views

CVE-2018-11531

Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp...

9.8CVSS0.02914EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2018/05/29 12:00 a.m.•2 views

PT-2018-19187

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is a heap-based buffer overflow in the getData function located in preview.cpp. Recommendations For Exiv2 version 0.26, at the moment, there is no information about a newer version that contains a fix f...

9.8CVSS6.1AI score
SaveExploits0References6
Rows per page
Query Builder