14 matches found
CLEANSTART-2024-EI35625 CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0
Security vulnerability affects the exiv2 package. A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0...
Rocky Linux 8 [CIQ] Security Update: exiv2 / exiv2-debuginfo / exiv2-debugsource / exiv2-devel / etc (crlsa-2021_1758)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211758 advisory. exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check CVE-2019-17402 Tenable has extracted the preceding description block directly fr...
SUSE CVE-2019-13110
A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEGV via a crafted CRW image file...
Denial Of Service (DoS)
libexiv2.so is vulnerable to denial of service. The vulnerability exists in the CiffDirectory::readDirectory function of crwimageint.cpp due to integer overflows which allows an attacker to cause an application crash by providing malicious input...
The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
AZL-7204 CVE-2019-17402 affecting package exiv2 for versions less than 0.27.5-1
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size...
EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2019-1995)
According to the version of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of service SIGSEG...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service. The vulnerability exists through a stack overflow issue in CiffDirectory::readDirectory at crwimageint.cpp which allows an attacker to crash the application via malicious input...
Exiv2 Buffer Overflow Vulnerability (CNVD-2018-20550)
Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the...
CVE-2018-17581
CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...
UBUNTU-CVE-2018-17581
CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...
CVE-2018-17581
CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...
CVE-2018-17581: Uncontrolled Resource Consumption
CiffDirectory::readDirectory at crwimageint.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service...
PT-2018-19195
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to excessive stack consumption due to a recursive function in CiffDirectory::readDirectory at crwimage int.cpp, leading to a denial of service. Recommendations For Exiv2 version 0.26, conside...