Lucene search
+L

67 matches found

osv_debian
osv_debian
•added 2022/12/22 10:15 p.m.•13 views

DEBIAN-CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

9.1CVSS8.1AI score0.01554EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2022/12/22 10:15 p.m.•15 views

UBUNTU-CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

9.1CVSS7.2AI score0.01554EPSS
SaveExploits1References3
Prion
Prion
•added 2022/12/22 10:15 p.m.•34 views

Heap overflow

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

6.4CVSS8.8AI score0.01554EPSS
SaveExploits1References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/12/22 10:15 p.m.•47 views

CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

9.1CVSS7.1AI score0.01554EPSS
SaveExploits1References2
Veracode
Veracode
•added 2021/08/18 5:55 p.m.•14 views

Denial Of Service (DoS)

Exiv2 is vulnerable to denial of service. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if th...

5.5CVSS6.4AI score0.01051EPSS
SaveExploits0References8Affected Software2
RedhatCVE
RedhatCVE
•added 2021/08/10 5:52 p.m.•46 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS3.9AI score0.01051EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2021/08/10 5:52 p.m.•46 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS3.9AI score0.01104EPSS
SaveExploits0References3
NVD
NVD
•added 2021/08/09 7:15 p.m.•24 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS0.01104EPSS
SaveExploits0References6
Prion
Prion
•added 2021/08/09 7:15 p.m.•32 views

Code injection

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

4.3CVSS5.4AI score0.01104EPSS
SaveExploits0References6Affected Software3
osv_ubuntu
osv_ubuntu
•added 2021/08/09 7:15 p.m.•15 views

UBUNTU-CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.6AI score0.01104EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2021/08/09 6:15 p.m.•6 views

DEBIAN-CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.2AI score0.01051EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/08/09 6:15 p.m.•15 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References8Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/09 12:00 a.m.•8 views

CVE-2021-37623: Loop with Unreachable Exit Condition

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.8AI score0.01051EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2021/08/09 12:00 a.m.•88 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.6AI score0.01051EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2021/08/09 12:00 a.m.•100 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.6AI score0.01104EPSS
SaveExploits0
Mend
Mend
•added 2021/08/09 12:00 a.m.•5 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

6.8CVSS0.01104EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/09 12:00 a.m.•5 views

CVE-2021-37622: Loop with Unreachable Exit Condition

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5.8AI score0.01104EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2021/08/09 12:00 a.m.•75 views

CVE-2021-37622

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.6AI score0.01104EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/08/09 12:00 a.m.•72 views

CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS5AI score0.01051EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/07/14 12:00 a.m.•9 views

PT-2021-7697

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.4 and earlier Description The issue is related to an infinite loop in Exiv2 when modifying the metadata of a crafted image file, potentially allowing an attacker to cause a denial of service. This bug is triggered when...

7.1CVSS6.4AI score0.01104EPSS
SaveExploits0References97
Rows per page
Query Builder