rpm package

almalinux/exiv2-doc

pkg:rpm/almalinux/exiv2-doc

Vulnerabilities (43)

CVE	Sev	CVSS	Affected versions	Fixed in	Published	Description
CVE-2018-9303	Med	6.5	< 0.27.2-5.el8	0.27.2-5.el8	Apr 4, 2018	In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
CVE-2018-4868	Med	5.5	< 0.27.2-5.el8	0.27.2-5.el8	Jan 3, 2018	The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.
CVE-2017-18005	Med	5.5	< 0.27.2-5.el8	0.27.2-5.el8	Dec 31, 2017	Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.

CVE-2018-9303MedApr 4, 2018
affected < 0.27.2-5.el8fixed 0.27.2-5.el8
In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
CVE-2018-4868MedJan 3, 2018
affected < 0.27.2-5.el8fixed 0.27.2-5.el8
The Exiv2::Jp2Image::readMetadata function in jp2image.cpp in Exiv2 0.26 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file.
CVE-2017-18005MedDec 31, 2017
affected < 0.27.2-5.el8fixed 0.27.2-5.el8
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.

Page 3 of 3