Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2367)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : exiv2 (EulerOS-SA-2021-2367)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read w...

CVE-2020-18899

An uncontrolled memory allocation in DataBufdatasubBox.length-sizeofbox function of Exiv2 0.27 allows attackers to cause a denial of service DOS via a crafted input...

CVE-2020-18898

The exiv2 program is susceptible to a stack exhaustion issue via a crafted file. The cause of this vulnerability, is due to a flaw in the code which could allow remote attackers to cause a denial of service DOS. The highest threat from this vulnerability is availability...

CentOS 8 : compat-exiv2-026 (CESA-2021:3153)

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2021:3153 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied only on t...

CentOS 8 : exiv2 (CESA-2021:3152)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:3152 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied only on t...

EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2327)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read w...

Updated exiv2 packages fix security vulnerabilities

The updated exiv2 packages fix security vulnerabilities: An assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a...

MGASA-2021-0415 Updated exiv2 packages fix security vulnerabilities

The updated exiv2 packages fix security vulnerabilities: An assertion failure is triggered when Exiv2 is used to modify the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a...

Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2021-2327)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-2750-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2750-1] exiv2 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2750-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta August 30, 2021 https://wiki.debian.org/LTS -...

Debian DLA-2750-1 : exiv2 - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2750 advisory. Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or...

DLA-2750-1 exiv2 - security update

Bulletin has no description...

CVE-2020-18774

A float point exception in the printLong function in tagsint.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

CVE-2020-18773

An invalid memory access in the decode function in iptc.cpp of Exiv2 0.27.99.0 allows attackers to cause a denial of service DOS via a crafted tif file...

Scientific Linux Security Update : compat-exiv2-023 on SL7.x i686/x86_64 (2021:3234)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3234-1 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied onl...

Scientific Linux Security Update : compat-exiv2-026 on SL7.x i686/x86_64 (2021:3233)

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3233-1 advisory. - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp CVE-2021-31291 Note that Nessus has not tested for this issue but has instead relied onl...

CVE-2020-18771

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp which can result in an information leak...

Exiv2 Buffer Overflow Vulnerability (CNVD-2021-94951)

Exiv2 is a cross-platform C library and command-line utility for managing image metadata. a buffer overflow vulnerability exists in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmnint.cpp in Exiv2 version 0.27.99.0. An attacker could exploit this vulnerability to obtain information...