PYSEC-2018-140

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

Input validation

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

CVE-2018-18915

CVE-2018-18915 : In Exiv2 0.27-RC1, there is an infinite loop in Exiv2::Image::printIFDStructure (image.cpp) that can cause remote denial of service via crafted input. This vulnerability is referenced in multiple advisories (e.g., Exiv2-related Nessus/MiracleLinux/Rocky/Oracle/SUSE entries) and i...

CVE-2018-18915

There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack...

Denial Of Service (DoS) Through Null Pointer Dereference

libexiv2.so is vulnerable to denial of service DoS through null-pointer dereference attacks. The vulnerability exists in Exiv2::Image::printIFDStructure of image.cpp where a null-pointer dereference was possible leading to a DoS attack...

Denial Of Service (DoS) Through Heap Buffer Overflow

libexiv2.so is vulnerable to denial of service DoS through heap-based buffer overflow attacks. The vulnerability exists in basicio.cpp which causes an out-of-bounds write in Exiv2::Image::printIFDStructure and leads to a DoS attack, and possibly other attacks...

CVE-2018-5772

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

Design/Logic Flaw

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

CVE-2018-5772

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

CVE-2018-5772

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file...

CVE-2018-5772

CVE-2018-5772 affects Exiv2 0.26. It is caused by uncontrolled recursion in Image::printIFDStructure (image.cpp), leading to a segmentation fault and potential denial of service when processing crafted TIFF files. Multiple advisories document the fix in later Exiv2 releases (e.g., SUSE-SU-2022-35...

PT-2018-17137 · Exiv2 +2 · Exiv2 +2

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function, located in the image.cpp file. This can be exploited by remote attackers to cause a denial of service using a craft...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14861

There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack...

Null pointer dereference

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14863

A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service...

CVE-2017-14863

CVE-2017-14863 corresponds to a NULL pointer dereference in Exiv2 0.26 (Exiv2::Image::printIFDStructure in image.cpp) that can cause a segmentation fault and denial of service. Connected sources confirm Exiv2/0.26 as affected and indicate fixes in later Exiv2 releases (e.g., 0.27.2+; some advisor...