PT-2018-10098 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts through a crafted file. This is due to the tEXtToDataBuf...

CVE-2018-9145

In the DataBuf class in include/exiv2/types.hpp in Exiv2 0.26, an issue exists in the constructor with an initial buffer size. A large size value may lead to a SIGABRT during an attempt at memory allocation. NOTE: some third parties have been unable to reproduce the SIGABRT when using the...

CVE-2018-9144

An out-of-bound read has been found in Exiv2 in the way binary bytes are converted to string. An attacker could potentially use this flaw to crash the Exiv2 CLI utility program by tricking it into processing a crafted TIFF image...

CVE-2018-9304

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service...

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

CVE-2018-9304

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service...

CVE-2018-9304

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service...

CVE-2018-9303

In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort...

Authentication flaw

In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort...

CVE-2018-9303

In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort...

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

Type confusion

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

Design/Logic Flaw

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service...

CVE-2018-9303

In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort...

CVE-2018-9305

CVE-2018-9305 : In Exiv2, there is an out-of-bounds read in IptcData::printStructure (iptc.c) that could cause a crash and potential information leak. Public advisories show the issue affecting Exiv2 prior to the 0.27.2 release, with fixes shipped in 0.27.2 (e.g., MiracleLinux 8/7 advisories, Alm...

CVE-2018-9304

In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service...

CVE-2018-9304

CVE-2018-9304 affects Exiv2; a divide-by-zero in BigTiffImage::printIFD (bigtiffimage.cpp) could enable a denial of service. Public references describe the issue across multiple OS advisories. Affected release in the initial description notes Exiv2 0.26; advisories indicate remediation by upgradi...

CVE-2018-9303

CVE-2018-9303: In Exiv2 0.26, an assertion failure in BigTiffImage::readData (bigtiffimage.cpp) can abort the process. Affected component: Exiv2 library (BigTIffImage handling). Practical impact: application crash. Remediation: upgrade to Exiv2 0.27.2 or later (as reflected in OSV/RLSA/ELSA advis...

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...