Lucene search
+L

496 matches found

OSV
OSV
added 2021/08/09 7:15 p.m.4 views

UBUNTU-CVE-2021-37620

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted image file. An...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References6
Prion
Prion
added 2021/08/09 7:15 p.m.32 views

Out-of-bounds

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

4.3CVSS5.7AI score0.00984EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2021/08/09 7:15 p.m.39 views

CVE-2021-37618

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to print the metadata of a crafted image file. A...

5.5CVSS6.7AI score0.00984EPSS
SaveExploits0References4
Prion
Prion
added 2021/08/09 7:15 p.m.27 views

Code injection

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

4.3CVSS5.4AI score0.01109EPSS
SaveExploits0References6Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/08/09 7:15 p.m.10 views

CVE-2021-37619

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

5.5CVSS6.6AI score0.00984EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2021/08/09 6:15 p.m.3 views

DEBIAN-CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.2AI score0.01051EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/09 6:15 p.m.9 views

AZL-7225 CVE-2021-37623 affecting package exiv2 for versions less than 0.27.5-1

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/09 6:15 p.m.6 views

CVE-2021-34334

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

5.5CVSS6.7AI score0.01113EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/08/09 6:15 p.m.5 views

UBUNTU-CVE-2021-32815

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

5.5CVSS6.8AI score0.01104EPSS
SaveExploits0References5
Prion
Prion
added 2021/08/09 6:15 p.m.30 views

Code injection

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

4.3CVSS5.3AI score0.01113EPSS
SaveExploits0References6Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/08/09 6:15 p.m.6 views

CVE-2021-32815

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

5.5CVSS6.7AI score0.01104EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2021/08/09 6:15 p.m.7 views

UBUNTU-CVE-2021-34334

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

5.5CVSS6.7AI score0.01113EPSS
SaveExploits0References5
OSV
OSV
added 2021/08/09 6:15 p.m.10 views

UBUNTU-CVE-2021-37623

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacke...

5.5CVSS6.6AI score0.01051EPSS
SaveExploits0References5
CVE
CVE
added 2021/08/09 12:00 a.m.192 views

CVE-2021-37618

Exiv2 vulnerability CVE-2021-37618 affects the Exiv2 library and command-line tool up to version 0.27.4. The issue is an out-of-bounds read occurring when printing the image ICC profile (triggered with -p C), which could lead to a denial of service if a crafted image is processed. The root cause ...

5.5CVSS5.7AI score0.00984EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2021/08/09 12:00 a.m.42 views

CVE-2021-37621 Denial of service due to infinite loop in Image::printIFDStructure

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was found in Exiv2 versions v0.27.4 and earlier. The infinite loop is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker...

5.5CVSS6.4AI score0.01104EPSS
SaveExploits0References6
CVE
CVE
added 2021/08/09 12:00 a.m.130 views

CVE-2021-37616

Summary: CVE-2021-37616 is a null pointer dereference in Exiv2 up to version 0.27.4, triggered when printing interpreted/translated metadata (requires -p t or -P t). This can lead to a denial of service if a user runs Exiv2 on a crafted image file. The issue affects Exiv2 0.27.4 and earlier and h...

5.5CVSS5.5AI score0.01034EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2021/08/09 12:00 a.m.15 views

Exiv2 安全漏洞

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. exiv2 0.27.4 and earlier versions are vulnerable to an infinite loop. An attacker could exploit the vulnerability via specially crafted image files to cause a denial of service...

5.5CVSS5.7AI score0.01113EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
added 2021/08/09 12:00 a.m.3 views

PT-2021-6517

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to v0.27.5 Description The issue is related to an infinite loop triggered when Exiv2 is used to read the metadata of a crafted image file. This could potentially be exploited by an attacker to cause a denial of service if...

7.1CVSS6.6AI score0.01113EPSS
SaveExploits0References116
AlpineLinux
AlpineLinux
added 2021/08/09 12:00 a.m.64 views

CVE-2021-32815

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denia...

5.5CVSS5.6AI score0.01104EPSS
SaveExploits0
CNVD
CNVD
added 2021/07/16 12:00 a.m.27 views

Exiv2 has an unspecified vulnerability (CNVD-2021-62174)

Exiv2 is a set of C libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in multiple formats such as EXIF, IPTC, and XMP.A security vulnerability exists in Exiv2 version 0.27.1, which stems from an integer overflow in Exiv2'...

3.3AI score
SaveExploits0References1
Rows per page
Query Builder