Lucene search
+L

2689 matches found

BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.9 views

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the bigtiffimage.cpp component in the Exiv2 metadata management library is related to a division-by-zero error. Exploiting this vulnerability could allow an attacker to cause service failures...

7.1CVSS6.6AI score0.01738EPSS
SaveExploits1References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.9 views

The vulnerability of the xmpsdk component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the xmpsdk component in the Exiv2 metadata management library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a attacker to cause service failures...

5.5CVSS6.3AI score0.01174EPSS
SaveExploits0References14Affected Software8
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.8 views

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to trigger a denial-of-service attack.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to trigger a denial-of-service attack...

5.5CVSS6.5AI score0.01034EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.9 views

The vulnerability of the pngimage.cpp component in the Exiv2 metadata management library, which involves writing beyond buffer boundaries in memory, allows a attacker to cause a service failure.

The vulnerability of the pngimage.cpp component in the Exiv2 media metadata management library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.8 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the buffer in memory, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS6.7AI score0.01571EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.6 views

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library allows a perpetrator to cause service interruptions.

The vulnerability of the Exiv2::Jp2Image::encodeJp2Header function in the Exiv2 metadata management library involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.7AI score0.00984EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.7 views

The vulnerability of the webpimage.cpp component in the Exiv2 metadata management library allows a attacker to cause a service failure.

The vulnerability of the webpimage.cpp component in the Exiv2 media metadata management library is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

7.8CVSS7.2AI score0.02001EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.12 views

The vulnerability of the Exiv2 metadata management library, related to the swapping of the zero pointer, allows a attacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00989EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
added 2023/09/12 12:0 a.m.10 views

The vulnerability of the Exiv2 metadata management library, related to the execution of a loop with an unreachable exit condition, allows a perpetrator to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.01051EPSS
SaveExploits0References10Affected Software6
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.21 views

Oracle Linux 7 : exiv2 (ELSA-2020-4030)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4030 advisory. 0.27.0-3 - Validate relationship of the total size to the offset to avoid crash Resolves: bz1775695 Tenable has extracted the preceding description block direct...

6.5CVSS7AI score0.01851EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.36 views

Oracle Linux 7 : exiv2 (ELSA-2019-2101)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-2101 advisory. 0.27.0-2 - Minor improvements Resolves: bz1652637 0.27.0-1 - Exiv2 0.27.0 Resolves: bz1652637 Tenable has extracted the preceding description block...

8.8CVSS6.5AI score0.02891EPSS
SaveExploits20References23
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.39 views

Oracle Linux 8 : exiv2 (ELSA-2020-1577)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1577 advisory. exiv2 0.27.2-5 - Fix failing test Resolves: bz1800472 0.27.2-4 - Drop test for the previous CVE as we test it manually and we dont have POC available...

8.8CVSS6.5AI score0.04296EPSS
SaveExploits26References29
CNVD
CNVD
added 2023/08/30 12:0 a.m.52 views

Exiv2 buffer overflow vulnerability (CNVD-2023-68223)

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...

7.8CVSS7.1AI score0.00697EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
added 2023/08/26 8:13 a.m.5 views

SUSE CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

5.3CVSS6.9AI score0.00697EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/08/24 12:0 a.m.12 views

PT-2023-35969 · Unknown +1 · Libbrotlidec +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a crash caused by a container-overflow write in the BrotliDecoderDecompressStream function, which is called by Exiv2::BmffImage::brotliUncompress. This crash occurs in...

6.8AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/23 12:0 a.m.35 views

Amazon Linux 2 : exiv2 (ALAS-2023-2215)

The version of exiv2 installed on the remote host is prior to 0.27.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2215 advisory. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. ...

7.8CVSS6.8AI score0.01499EPSS
SaveExploits0References6
NVD
NVD
added 2023/08/22 7:15 p.m.34 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/22 7:15 p.m.20 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.2AI score
SaveExploits0References2
OSV
OSV
added 2023/08/22 7:15 p.m.3 views

DEBIAN-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1References1
PyPA
PyPA
added 2023/08/22 7:15 p.m.14 views

PYSEC-2023-150

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7AI score0.00697EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder