Lucene search
+L

2689 matches found

Prion
Prion
added 2023/08/22 7:15 p.m.17 views

Buffer overflow

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

4.4CVSS7.3AI score0.00697EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
added 2023/08/22 7:15 p.m.16 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.1AI score0.00697EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/22 7:15 p.m.12 views

PYSEC-2023-150

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.2AI score0.00697EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/22 7:15 p.m.5 views

UBUNTU-CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS5.8AI score0.00697EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2023/08/22 12:0 a.m.10 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

6.8AI score0.00697EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2023/08/22 12:0 a.m.44 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00697EPSS
SaveExploits1
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.20 views

Exiv2 缓冲区错误漏洞

Exiv2 is a suite of C++ libraries and command line applications for managing image metadata. It provides the ability to read and write image metadata in a variety of formats including EXIF, IPTC and XMP. A buffer overflow vulnerability exists in Exiv2 version 0.27.1, which stems from a boundary...

7.8CVSS7.1AI score0.00697EPSS
SaveExploits1References3
CVE
CVE
added 2023/08/22 12:0 a.m.53 views

CVE-2020-18831

CVE-2020-18831 affects Exiv2, specifically the buffer overflow in the tEXtToDataBuf function within pngimage.cpp of version 0.27.1. The vulnerability can be triggered by processing crafted image files, leading to a denial of service and other unspecified impacts. The available connected documents...

7.8CVSS7.3AI score0.00697EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/08/22 12:0 a.m.40 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.4AI score0.00697EPSS
SaveExploits1References2
Amazon
Amazon
added 2023/08/21 12:0 a.m.29 views

Medium: exiv2

Issue Overview: Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted...

7.8CVSS6.9AI score0.01499EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/04/11 12:0 a.m.24 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : compat-exiv2-026 Vulnerability (NS-SA-2023-0022)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has compat-exiv2-026 packages installed that are affected by a vulnerability: - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All...

7.8CVSS6AI score0.02152EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.10 views

The vulnerability of the tiffimage_int.cpp component in the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the tiffimageint.cpp component in the Exiv2 metadata management library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.1CVSS7AI score0.02287EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.12 views

The vulnerability of the Exiv2 metadata management library commands, related to executing a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library commands is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created image file...

7.1CVSS6.7AI score0.01109EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.8 views

The vulnerability of the Exiv2::DataValue::toLong function in the value.cpp library for managing Exiv2 metadata files allows a perpetrator to cause service failure.

The vulnerability of the Exiv2::DataValue::toLong function in the value.cpp component of the Exiv2 metadata management library is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures...

7.1CVSS6.7AI score0.008EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.12 views

The vulnerability of the Exiv2 metadata management library commands, related to executing a loop with an unreachable exit condition, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library commands is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created image file...

7.1CVSS6.7AI score0.01104EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.9 views

The vulnerability of the mrwimage.cpp component in the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the mrwimage.cpp component in the Exiv2 metadata management library is related to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.1CVSS7.1AI score0.02386EPSS
SaveExploits1References12Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.8 views

The vulnerability of the Exiv2::PngImage::readMetadata() function in the pngimage.cpp component of the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the Exiv2::PngImage::readMetadata function in the pngimage.cpp component of the Exiv2 metadata management library is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a...

7.1CVSS6.7AI score0.01203EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.8 views

The vulnerability of the Exiv2::MrwImage::readMetadata() function in the mrwimage.cpp component of the Exiv2 metadata management library allows a hacker to induce a service failure.

The vulnerability of the Exiv2::MrwImage::readMetadata function in the mrwimage.cpp component of the Exiv2 metadata management library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures through a...

7.1CVSS6.9AI score0.01116EPSS
SaveExploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.8 views

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

7.1CVSS6.7AI score0.01568EPSS
SaveExploits1References17Affected Software5
OpenVAS
OpenVAS
added 2023/03/09 12:0 a.m.21 views

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2023-1500)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1AI score
SaveExploits0References2
Rows per page
Query Builder