Lucene search
+L

2689 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.9 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.01571EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the xmpsdk component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the xmpsdk component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

5.5CVSS6.3AI score0.01174EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.7 views

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library allows a perpetrator to cause service interruptions.

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00984EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.8 views

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to trigger a denial-of-service attack.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

5.5CVSS6.5AI score0.01034EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.02001EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library is related to a division-by-zero error. Exploiting this vulnerability could allow an attacker to cause service failures...

7.1CVSS6.6AI score0.01738EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a perpetrator to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.12 views

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00989EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the image.cpp component in the Exiv2 media metadata management library allows a hacker to cause a service failure.

The vulnerability of the image.cpp component in the Exiv2 metadata management library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9.4CVSS7.3AI score0.019EPSS
SaveExploits1References5Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.39 views

Oracle Linux 8 : exiv2 (ELSA-2020-1577)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1577 advisory. exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available...

8.8CVSS6.5AI score0.04296EPSS
SaveExploits26References29
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.22 views

Oracle Linux 7 : exiv2 (ELSA-2020-4030)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4030 advisory. 0.27.0-3 - Validate relationship of the total size to the offset to avoid crash Resolves: bz1775695 Tenable has extracted the preceding description block direct...

6.5CVSS7AI score0.01851EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.36 views

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...

8.8CVSS6.5AI score0.02891EPSS
SaveExploits20References23
CNVD
CNVD
added 2023/08/30 12:0 a.m.58 views

Exiv2 buffer overflow vulnerability (CNVD-2023-68223)

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...

7.8CVSS7.1AI score0.00697EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2023/08/26 8:13 a.m.6 views

SUSE CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

5.3CVSS6.9AI score0.00697EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/08/24 12:0 a.m.12 views

PT-2023-35969 · Unknown +1 · Libbrotlidec +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a crash caused by a container-overflow write in the BrotliDecoderDecompressStream function, which is called by Exiv2::BmffImage::brotliUncompress. This crash occurs in...

6.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/23 12:0 a.m.35 views

Amazon Linux 2 : exiv2 (ALAS-2023-2215)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2215 advisory. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. ...

7.8CVSS6.8AI score0.01499EPSS
SaveExploits0References6
NVD
NVD
added 2023/08/22 7:15 p.m.36 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/22 7:15 p.m.3 views

DEBIAN-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1References1
OSV
OSV
added 2023/08/22 7:15 p.m.22 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.2AI score
SaveExploits0References2
Prion
Prion
added 2023/08/22 7:15 p.m.19 views

Buffer overflow

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

4.4CVSS7.3AI score0.00697EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder