Denial Of Service (DoS)

libexiv2.so is vulnerable to denial of serviceDoS. The attack can be caused due to a flaw in updating resourcesLength parameter in the readMetadata function of psdimage.cpp...

Exiv2 'readMetadata' Function Denial of Service Vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides for reading and writing image metadata in a variety of formats including EXIF, IPTC and XMP. A security vulnerability exists in the 'readMetadata' functio...

PYSEC-2018-127

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

CVE-2018-10998

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

CVE-2018-10998

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

CVE-2018-10998

CVE-2018-10998 is an Exiv2 0.26 ReadMetadata issue in jp2image.cpp where an incorrect Safe::add call triggers SIGABRT, leading to denial of service. Public advisory entries (MiracleLinux, EulerOS, NewStart CGSL/AL2) enumerate this CVE among Exiv2 0.26/0.27.x family issues. Remediation: upgrade Ex...

CVE-2018-10998: Undefined Security Weakness

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

CVE-2018-10998

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

UBUNTU-CVE-2018-10998

An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service SIGABRT by triggering an incorrect Safe::add call...

PT-2018-3145 · Exiv2 +5 · Exiv2 +5

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.26 Description: The issue is related to incorrect error handling in the jp2image.cpp component of the Exiv2 library for managing media file metadata. Exploitation of this issue may allow a remote attacker to cause a denial of...

CVE-2018-4868

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

Design/Logic Flaw

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

CVE-2018-4868

CVE-2018-4868 affects Exiv2 0.26: Exiv2::Jp2Image::readMetadata() can cause excessive memory allocation, enabling DoS via crafted files. The fix is to upgrade Exiv2 to later release (e.g., 0.27.2 as deployed in updated advisories, e.g., ALSA-2020:1577/RHSA-2020:1577). If upgrading is not possible...

CVE-2018-4868: Allocation of Resources Without Limits or Throttling

The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file...

CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

PYSEC-2017-133

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14860

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

CVE-2017-14860: Out-of-bounds Read

There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack...

Exiv2 Exiv2::Jp2Image::readMetadata function heap buffer overflow vulnerability

Exiv2 is a set of C++ libraries and command line applications for managing image metadata by software developer Andreas Huggel, which provides fast and easy reading and writing of image metadata in a variety of EXIF, IPTC and XMP formats. A heap buffer overflow vulnerability exists in the...