Exiv2 Exiv2::DataValue::read Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the...

UBUNTU-CVE-2017-14864

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

UBUNTU-CVE-2017-14862

An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

Exiv2 Exiv2::StringValueBase::read Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A security vulnerability exists in the...

CVE-2017-14864

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14859

An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14862

CVE-2017-14862 is an Exiv2 0.26 vulnerability where an Invalid memory address dereference in Exiv2::DataValue::read (value.cpp) can cause a segmentation fault and application crash, leading to a denial of service. Connected advisories from Astra Linux, Debian (DLA-3265), Ubuntu USN-3852-1, and Re...

CVE-2017-14864

CVE-2017-14864 : An invalid memory address dereference in Exiv2::getULong (types.cpp) of Exiv2 0.26 can cause a segmentation fault and denial of service. Connected advisories confirm Exiv2 exposure in multiple Linux distros and vendor advisories, with mitigations/patches released. The Debian LTS ...

CVE-2017-14859

CVE-2017-14859 affects Exiv2 up to version 0.26, where an invalid memory address dereference in Exiv2::StringValueBase::read (value.cpp) can cause a segmentation fault and denial of service. The connected documents confirm this precise root cause and the resulting crash vector, and cite multiple ...

CVE-2017-14864

An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2015-3138

CVE-2015-3138 affects tcpdump before version 4.7.4, where print-wb.c can be exploited remotely to cause a denial of service (segmentation fault and process crash). The vulnerability is triggered via crafted input that impacts the WB (print-wb) path. The available description specifies the vulnera...

The vulnerability of the ap_find_token function in the Apache HTTP Server allows a hacker to trigger a segmentation fault.

The vulnerability of the apfindtoken function in the Apache HTTP Server exists due to insufficient validation of input data during the analysis of the token list. Exploiting this vulnerability can allow a malicious actor to trigger a segmentation fault or cause the apfindtoken function to return ...

Null pointer dereference

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14638

AP4AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, segmentation fault, and application crash in AP4Atom::SetType in Core/Ap4Atom.h...

UBUNTU-CVE-2017-14641

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14641

A NULL pointer dereference was discovered in the AP4DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

Null pointer dereference

A NULL pointer dereference was discovered in the AP4HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service...

CVE-2017-14640

A NULL pointer dereference was discovered in AP4AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

CVE-2017-14642

A NULL pointer dereference was discovered in the AP4HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application crash in AP4StdcFileByteStream::ReadPartial in System/StdC/Ap4StdCFileByteStream.cpp, which leads to remote denial of service...