SUSE-SU-2023:4070-1 Security update for exiv2

This update for exiv2 fixes the following issues: - CVE-2018-19535: Fixed a heap-based buffer over-read which may cause a DoS via a crafted PNG file. bsc1117291...

Medium: exiv2

Issue Overview: Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file. CVE-2020-18831 Affected Packages: exiv2 Note: This advisory is applicable to Amazon...

Amazon Linux 2 : exiv2 (ALAS-2023-2284)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2284 advisory. Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of...

CVE-2022-3718 affecting package exiv2 for versions less than 0.28.0-1

CVE-2022-3718 affecting package exiv2 for versions less than 0.28.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3717 affecting package exiv2 for versions less than 0.28.0-1

CVE-2022-3717 affecting package exiv2 for versions less than 0.28.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3719 affecting package exiv2 for versions less than 0.28.0-1

CVE-2022-3719 affecting package exiv2 for versions less than 0.28.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3953 affecting package exiv2 for versions less than 0.28.0-1

CVE-2022-3953 affecting package exiv2 for versions less than 0.28.0-1. An upgraded version of the package is available that resolves this issue...

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to trigger a denial-of-service attack.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library is related to a division-by-zero error. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the image.cpp component in the Exiv2 media metadata management library allows a hacker to cause a service failure.

The vulnerability of the image.cpp component in the Exiv2 metadata management library involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the pngimage.cpp component in the Exiv2 metadata management library, which involves writing beyond buffer boundaries in memory, allows a attacker to cause a service failure.

The vulnerability of the pngimage.cpp component in the Exiv2 media metadata management library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library allows a perpetrator to cause service interruptions.

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xmpsdk component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the xmpsdk component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a perpetrator to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Oracle Linux 8 : exiv2 (ELSA-2020-1577)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1577 advisory. exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available...

Oracle Linux 7 : exiv2 (ELSA-2020-4030)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4030 advisory. 0.27.0-3 - Validate relationship of the total size to the offset to avoid crash Resolves: bz1775695 Tenable has extracted the preceding description block direct...

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...