Lucene search
K

20 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-0042

Malware in sbrugna...

6.5CVSS7.3AI score0.01233EPSS
Exploits1References11
PyPA
PyPA
added 2023/08/22 7:15 p.m.7 views

PYSEC-2023-150

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7AI score0.00911EPSS
Exploits1References5Affected Software1
Prion
Prion
added 2023/08/22 7:15 p.m.12 views

Buffer overflow

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

4.4CVSS7.3AI score0.00911EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2023/08/22 12:0 a.m.36 views

CVE-2020-18831

CVE-2020-18831 affects Exiv2, specifically the buffer overflow in the tEXtToDataBuf function within pngimage.cpp of version 0.27.1. The vulnerability can be triggered by processing crafted image files, leading to a denial of service and other unspecified impacts. The available connected documents...

7.8CVSS7.3AI score0.00911EPSS
Exploits1References2Affected Software1
Debian CVE
Debian CVE
added 2023/08/22 12:0 a.m.18 views

CVE-2020-18831

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7.4AI score0.00911EPSS
Exploits1
Veracode
Veracode
added 2020/04/29 2:39 a.m.22 views

Denial Of Service (DoS)

exiv2 is vulnerable to denial of service. The vulnerability exists in PngImage::readMetadata function of pngimage.cpp due to negative integer overflow which allows an attacker to crash the application via malicious input...

6.5CVSS7.2AI score0.00398EPSS
Exploits1References9Affected Software5
RedHat Linux
RedHat Linux
added 2020/04/28 3:31 p.m.3 views

exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

6.5CVSS6AI score0.00563EPSS
Exploits1References4
Veracode
Veracode
added 2019/11/07 2:23 a.m.19 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS. An attacker can input a malicious PNG file to PngImage::readMetadata in pngimage.cpp to cause a heap-based buffer overflow which results in a denial of service condition...

6.5CVSS4AI score0.00542EPSS
Exploits1References4Affected Software2
RedhatCVE
RedhatCVE
added 2018/12/18 10:22 a.m.24 views

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS4.2AI score0.01233EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2018/12/12 10:29 a.m.27 views

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS6.9AI score0.01233EPSS
Exploits1References2
NVD
NVD
added 2018/12/12 10:29 a.m.15 views

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS6.5AI score0.01233EPSS
Exploits1References4
OSV
OSV
added 2018/12/12 10:29 a.m.17 views

CVE-2018-20096

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS6.4AI score
Exploits0References4
Prion
Prion
added 2018/12/12 10:29 a.m.22 views

Heap overflow

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

4.3CVSS7.1AI score0.01233EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2018/12/12 10:29 a.m.18 views

PYSEC-2018-117

There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack...

6.5CVSS6.4AI score0.01233EPSS
Exploits1References4
CVE
CVE
added 2018/12/12 8:0 a.m.105 views

CVE-2018-20096

CVE-2018-20096 describes a heap-based buffer over-read in Exiv2’s pngimage.cpp:Exiv2::tEXtToDataBuf() within version 0.27-RC3. A crafted input can cause a remote denial of service. The connected Nessus advisories enumerate Exiv2-related issues and explicitly list this CVE among many, reinforcing ...

6.5CVSS6.4AI score0.01233EPSS
Exploits1References4Affected Software1
RedhatCVE
RedhatCVE
added 2018/06/25 4:20 a.m.35 views

CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

6.5CVSS6.7AI score0.00563EPSS
Exploits1References1
Veracode
Veracode
added 2018/05/07 7:39 a.m.25 views

Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of service DoS attacks. A malicious user can crash the applicaiton by passing a file to the tEXtToDataBuf function in pngimage.cpp...

6.5CVSS6.9AI score0.00563EPSS
Exploits1References3Affected Software5
UbuntuCve
UbuntuCve
added 2018/05/07 2:29 a.m.25 views

CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

6.5CVSS6.8AI score0.00563EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/05/07 2:0 a.m.23 views

CVE-2018-10772

The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted file...

7AI score0.00563EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2018/04/12 12:0 a.m.2 views

PT-2018-10098 · Exiv2 +6 · Exiv2 +6

Name of the Vulnerable Software and Affected Versions: Exiv2 versions prior to 0.27 Description: The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts through a crafted file. This is due to the tEXtToDataBuf...

9.8CVSS7.5AI score0.03067EPSS
Exploits62References348
Rows per page
Query Builder