Lucene search
+L

3262 matches found

attackerkb
attackerkb
•added 2022/02/24 3:15 p.m.•22 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS6.6AI score0.00728EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/02/24 3:15 p.m.•16 views

UBUNTU-CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS5.7AI score0.00728EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
•added 2022/02/24 3:15 p.m.•47 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS6.7AI score0.00728EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/24 3:15 p.m.•24 views

Design/Logic Flaw

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

4.3CVSS5.5AI score0.00781EPSS
SaveExploits1References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2022/02/24 3:15 p.m.•13 views

UBUNTU-CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS6.3AI score0.00781EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/24 3:15 p.m.•28 views

Design/Logic Flaw

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

4.3CVSS5.5AI score0.00728EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2022/02/24 1:11 p.m.•30 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

6.6AI score0.00728EPSS
SaveExploits1References3
CVE
CVE
•added 2022/02/24 1:11 p.m.•184 views

CVE-2022-24614

CVE-2022-24614 affects the metadata-extractor library (version

5.5CVSS5.4AI score0.00728EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/24 1:11 p.m.•42 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.9AI score0.00728EPSS
SaveExploits1References1
vulnersOsv
vulnersOsv
•added 2022/02/24 1:11 p.m.•5 views

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24614 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24614 Source advisory: MEND:CVE-2022-24614...

5.5CVSS0.00728EPSS
SaveExploits1
Mend
Mend
•added 2022/02/24 1:11 p.m.•10 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

6.8CVSS0.00728EPSS
SaveExploits1References8
CVE
CVE
•added 2022/02/24 12:55 p.m.•164 views

CVE-2022-24613

CVE-2022-24613 affects the metadata-extractor library up to 2.16.0. Parsing a specially crafted JPEG can trigger uncaught exceptions, causing an application crash and a possible denial of service. Connected documents consistently describe a DoS vector via crafted JPEG input and corroborate the im...

5.5CVSS5.4AI score0.00781EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/02/24 12:55 p.m.•8 views

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

6.8CVSS0.00781EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2022/02/24 12:55 p.m.•79 views

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS5.6AI score0.00781EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/02/24 12:55 p.m.•5 views

ai.mattmann.mnemosyne:cas-crawler (1.11.0), ai.mattmann.mnemosyne:cas-filemgr (1.11.0) +1111 more potentially affected by CVE-2022-24613 via com.drewnoakes:metadata-extractor (>=2.4.0-beta-1, <=2.17.0)

com.drewnoakes:metadata-extractor MAVEN version =2.4.0-beta-1, =1.0.1, =1.2.0, =4.2.0, =2.2.2, =2.2.2, =2.2.2, =2.2.4 and more Source cves: CVE-2022-24613 Source advisory: MEND:CVE-2022-24613...

5.5CVSS0.00781EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•6 views

PT-2022-16762

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0 Description The issue allows an application crash due to uncaught exceptions when parsing a specially crafted JPEG file, potentially leading to a denial of service attack against services using the...

5.5CVSS0.00781EPSS
SaveExploits1References21
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•4 views

PT-2022-16763

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0 Description The issue allows an attacker to cause a denial of service by allocating large amounts of memory when reading a specially crafted JPEG file, potentially affecting services that use the...

7.1CVSS0.00728EPSS
SaveExploits1References25
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-24614: Allocation of Resources Without Limits or Throttling

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS6.1AI score0.00728EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-24613: Improper Handling of Exceptional Conditions

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS6.1AI score0.00781EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/02/24 12:00 a.m.•23 views

MetadataExtractor security vulnerability

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. MetadataExtractor suffers from a security vulnerability that stems from the fact that when reading a specially crafted JPEG file, the metadata extractor can be used to allocate a...

5.5CVSS6.6AI score0.00781EPSS
SaveExploits1References4
Rows per page
Query Builder