2704 matches found
CentOS 7 : exiv2 (RHSA-2020:4030)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4030 advisory. - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in...
exiv2 security update
0.27.0-3 - Validate relationship of the total size to the offset to avoid crash Resolves: bz1775695...
Low: Red Hat Security Advisory: exiv2 security update
An update for exiv2 is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check
An out of bounds read vulnerability was discovered in the way exiv2 parses Canon raw format CRW images. An application that uses exiv2 library to parse untrusted images may be vulnerable to this flaw, which could be used by an attacker to extract data from the application's memory or make it cras...
RHEL 7 : exiv2 (RHSA-2020:4030)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4030 advisory. The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments. Security...
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2020-1844)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2020-1844)
According to the version of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the...
The vulnerability of component http.c in the Exiv2 metadata management library, which allows a hacker to cause a service failure.
The vulnerability of the http.c component in the Exiv2 metadata management library is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the CiffDirectory::readDirectory function in the Exiv2 media metadata management library is due to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to cause service interruptions remotely...
The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library allows a attacker to cause a service failure.
The vulnerability of the PngChunk::parseChunkContent function in the Exiv2 media metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures through the use of a speciall...
The vulnerability of the Exiv2 metadata management library, related to insufficient validation of input data, allows a hacker to trigger a service failure.
The vulnerability of the Exiv2 media metadata management library is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through the use of a specially created CRW file...
Updated exiv2 packages fix security vulnerability
The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...
MGASA-2020-0196 Updated exiv2 packages fix security vulnerability
The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service large heap allocation followed by a very long running loop via a crafted WEBP image file. CVE-2019-13111...
exiv2 security, bug fix, and enhancement update
exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available Resolves: bz1800472 0.27.2-3 - Fix infinite loop and hang in Jp2Image::readMetadata Resolves: bz1800472 0.27.2-2 Rebuild Resolves: bz1651917 0.27.2...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service DoS. The vulnerability exists through an integer overflow in WebPImage::decodeChunks...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service. The vulnerability exists through uncontrolled memory allocation in PngChunk::parseChunkContent allowing an attacker to crash the system via a malicious PNG image...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service. The vulnerability exists in CiffComponent::dataLocation function of crwimageint.cpp due to an invalid data location which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service. The vulnerability exists in PngImage::readMetadata function of pngimage.cpp due to negative integer overflow which allows an attacker to crash the application via malicious input...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service DoS. The vulnerability exists through a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp...
Denial Of Service (DoS)
exiv2 is vulnerable to denial of service DoS. The vulnerability exists through excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp...