CVE-2017-14859

2017-09-2800:00:00

ubuntu.com

0.001 Low

EPSS

Percentile

39.4%

JSON

An Invalid memory address dereference was discovered in
Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability
causes a segmentation fault and application crash, which leads to denial of
service.

Bugs

<https://github.com/Exiv2/exiv2/issues/74>
<https://bugzilla.redhat.com/show_bug.cgi?id=1494780>

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchexiv2< 0.25-3.1ubuntu0.18.04.2UNKNOWN
ubuntu18.10noarchexiv2< 0.25-4ubuntu0.1UNKNOWN
ubuntu14.04noarchexiv2< 0.23-1ubuntu2.2UNKNOWN
ubuntu16.04noarchexiv2< 0.25-2.1ubuntu16.04.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	exiv2	< 0.25-3.1ubuntu0.18.04.2	UNKNOWN
ubuntu	18.10	noarch	exiv2	< 0.25-4ubuntu0.1	UNKNOWN
ubuntu	14.04	noarch	exiv2	< 0.23-1ubuntu2.2	UNKNOWN
ubuntu	16.04	noarch	exiv2	< 0.25-2.1ubuntu16.04.3	UNKNOWN