Lucene search
+L

56 matches found

UbuntuCve
UbuntuCve
•added 2022/02/24 3:15 p.m.•47 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS6.7AI score0.00728EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/24 3:15 p.m.•25 views

Design/Logic Flaw

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

4.3CVSS5.5AI score0.00728EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/02/24 3:15 p.m.•23 views

Design/Logic Flaw

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

4.3CVSS5.5AI score0.00781EPSS
SaveExploits1References1Affected Software1
osv-ubuntu
osv-ubuntu
•added 2022/02/24 3:15 p.m.•8 views

UBUNTU-CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS6.3AI score0.00781EPSS
SaveExploits1References3
Mend
Mend
•added 2022/02/24 1:11 p.m.•7 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

6.8CVSS0.00728EPSS
SaveExploits1References8
CVE
CVE
•added 2022/02/24 1:11 p.m.•170 views

CVE-2022-24614

CVE-2022-24614 affects the metadata-extractor library (version

5.5CVSS5.4AI score0.00728EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/24 1:11 p.m.•41 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.9AI score0.00728EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2022/02/24 1:11 p.m.•28 views

CVE-2022-24614

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

6.6AI score
SaveExploits0References3
CVE
CVE
•added 2022/02/24 12:55 p.m.•161 views

CVE-2022-24613

CVE-2022-24613 affects the metadata-extractor library up to 2.16.0. Parsing a specially crafted JPEG can trigger uncaught exceptions, causing an application crash and a possible denial of service. Connected documents consistently describe a DoS vector via crafted JPEG input and corroborate the im...

5.5CVSS5.4AI score0.00781EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/02/24 12:55 p.m.•5 views

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

6.8CVSS0.00781EPSS
SaveExploits1References5
Debian CVE
Debian CVE
•added 2022/02/24 12:55 p.m.•78 views

CVE-2022-24613

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS5.6AI score0.00781EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•4 views

CVE-2022-24614: Allocation of Resources Without Limits or Throttling

When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor...

5.5CVSS6.1AI score0.00728EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•2 views

PT-2022-16763

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0 Description The issue allows an attacker to cause a denial of service by allocating large amounts of memory when reading a specially crafted JPEG file, potentially affecting services that use the...

7.1CVSS0.00728EPSS
SaveExploits1References25
CNNVD
CNNVD
•added 2022/02/24 12:00 a.m.•22 views

MetadataExtractor 安全漏洞

MetadataExtractor is a .NET library for extracting metadata such as Exif, IPT, XMP and ICC from image and video files. MetadataExtractor suffers from a security vulnerability that stems from the fact that when reading a specially crafted JPEG file, the metadata extractor can be used to allocate a...

5.5CVSS6.6AI score0.00781EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/24 12:00 a.m.•5 views

CVE-2022-24613: Improper Handling of Exceptional Conditions

metadata-extractor up to 2.16.0 can throw various uncaught exceptions while parsing a specially crafted JPEG file, which could result in an application crash. This could be used to mount a denial of service attack against services that use metadata-extractor library...

5.5CVSS6.1AI score0.00781EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/24 12:00 a.m.•4 views

PT-2022-16762

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0 Description The issue allows an application crash due to uncaught exceptions when parsing a specially crafted JPEG file, potentially leading to a denial of service attack against services using the...

5.5CVSS0.00781EPSS
SaveExploits1References21
Rows per page
Query Builder