2691 matches found
CVE-2017-14859
An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
CVE-2017-14864
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
Exiv2 Exiv2::s2Data function heap buffer overflow vulnerability
Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. A heap buffer overflow vulnerability exists in the Exiv2::s2Data function in types.cpp in Exiv2, which could allow an attacker to cause a denial of service via specially crafted input...
CVE-2017-14862
CVE-2017-14862 is an Exiv2 0.26 vulnerability where an Invalid memory address dereference in Exiv2::DataValue::read (value.cpp) can cause a segmentation fault and application crash, leading to a denial of service. Connected advisories from Astra Linux, Debian (DLA-3265), Ubuntu USN-3852-1, and Re...
CVE-2017-14864
CVE-2017-14864 : An invalid memory address dereference in Exiv2::getULong (types.cpp) of Exiv2 0.26 can cause a segmentation fault and denial of service. Connected advisories confirm Exiv2 exposure in multiple Linux distros and vendor advisories, with mitigations/patches released. The Debian LTS ...
CVE-2017-14864
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...
CVE-2017-14859
CVE-2017-14859 affects Exiv2 up to version 0.26, where an invalid memory address dereference in Exiv2::StringValueBase::read (value.cpp) can cause a segmentation fault and denial of service. The connected documents confirm this precise root cause and the resulting crash vector, and cite multiple ...
CVE-2017-12955
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...
CVE-2017-12956
There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...
CVE-2017-12957
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service...
Exiv2 Denial of Service Vulnerability (CNVD-2017-27705)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata developed by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in EXIF, IPTC and XMP formats. libexiv2 is one of the core libraries. A denial of service...
Heap overflow
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure, which may lead to remote denial of service or possibly unspecified other impact...
PYSEC-2017-128
There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...
CVE-2017-12957
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service...
CVE-2017-12956
There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...
PYSEC-2017-128
There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...
CVE-2017-12957
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. It will lead to remote denial of service...
CVE-2017-12956
There is an illegal address access in Exiv2::FileIo::pathabi:cxx11 in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service...