CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

11 matches found

Tenable Nessus•added 2021/04/30 12:0 a.m.•34 views

EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2021-1782)

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Exiv2 0.26 has a heap-based buffer overflow in getData in preview.cpp.CVE-2018-11531 - Exiv2 0.27.2 allows attackers to trigger a crash in...

9.8CVSS6.8AI score0.0144EPSS

Exploits2References4

RedHat Linux•added 2019/08/06 2:22 p.m.•3 views

exiv2: heap-based buffer over-read in parseTXTChunk function

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read...

6.5CVSS5.9AI score0.00438EPSS

Exploits1References4

Veracode•added 2018/09/03 4:50 a.m.•27 views

Denial Of Service

libexiv2.so is vulnerable to denial of service. The Exiv2::Internal::PngChunk::parseTXTChunk function allows remote attackers to cause a denial of service condition through a heap-based buffer over-read using a crafted image file. This CVE ID is different from CVE-2018-10999...

6.5CVSS6.9AI score0.00438EPSS

Exploits1References4Affected Software1

Prion•added 2018/09/02 3:29 a.m.•28 views

Heap overflow

Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers to cause a denial of service heap-based buffer over-read via a crafted image file, a different vulnerability than CVE-2018-10999...

4.3CVSS6.2AI score0.00438EPSS

Exploits1References3Affected Software3