Lucene search
+L

8 matches found

Veracode
Veracode
•added 2018/09/17 1:59 a.m.•41 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service. The Exiv2::IptcData::printStructure function in iptc.cpp related to the != 0x1c case, is affected with a heap-based over-read which would allow a remote attacker to cause a denial of service condition via a crafted TIFF file...

6.5CVSS6.8AI score0.02132EPSS
SaveExploits1References8Affected Software2
osv-cve
osv-cve
•added 2018/04/04 9:29 p.m.•42 views

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

8.1CVSS6.7AI score
SaveExploits0References5
Mend
Mend
•added 2018/04/04 9:00 p.m.•3 views

CVE-2018-9305

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

8.1CVSS0.01924EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/04 12:00 a.m.•7 views

CVE-2018-9305: Out-of-bounds Read

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case...

8.1CVSS6.7AI score0.01924EPSS
SaveExploits1References2
Prion
Prion
•added 2018/02/12 10:29 p.m.•36 views

Heap overflow

In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp, related to the "!= 0x1c" case. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file...

4.3CVSS6.9AI score0.02132EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2018/02/12 12:00 a.m.•4 views

PT-2018-6556

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to a heap-based buffer over-read in the Exiv2::IptcData::printStructure function, specifically in the "!= 0x1c" case. This can be exploited by remote attackers to cause a denial of service...

6.5CVSS0.02132EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2018/02/12 12:00 a.m.•3 views

PT-2018-19181

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to a heap-based buffer over-read in the Exiv2::IptcData::printStructure function, specifically in the "!= 0x1c" case. This can be exploited by remote attackers to cause a denial of service...

6.5CVSS6AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2017/05/08 12:00 a.m.•2 views

PT-2018-18963

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26 Description The issue is related to an out-of-bounds read in the IptcData::printStructure function in iptc.c, specifically in the "== 0x1c" case, which could lead to a crash or information leak. Recommendations For Exiv2...

8.8CVSS0.02891EPSS
SaveExploits3References103
Rows per page
Query Builder