Ubuntu.comUB:CVE-2019-14982CVE-2019-14982
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.4%
In Exiv2 before v0.27.2, there is an integer overflow vulnerability in the
WebPImage::getHeaderOffset function in webpimage.cpp. It can lead to a
buffer overflow vulnerability and a crash.
References
github.com/Exiv2/exiv2/compare/v0.27.2-RC2...v0.27.2
github.com/Exiv2/exiv2/issues/960
github.com/Exiv2/exiv2/pull/962/commits/e925bc5addd881543fa503470c8a859e112cca62
launchpad.net/bugs/cve/CVE-2019-14982
nvd.nist.gov/vuln/detail/CVE-2019-14982
security-tracker.debian.org/tracker/CVE-2019-14982
www.cve.org/CVERecord?id=CVE-2019-14982
Related
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
69.4%