rpm package
opensuse/exiv2&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/exiv2&distro=openSUSE%20Tumbleweed
Vulnerabilities (48)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-29463 | — | < 0.27.5-6.1 | 0.27.5-6.1 | Apr 30, 2021 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte | ||
| CVE-2021-29470 | — | < 0.27.5-3.1 | 0.27.5-3.1 | Apr 23, 2021 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte | ||
| CVE-2021-29458 | — | < 0.27.5-11.1 | 0.27.5-11.1 | Apr 19, 2021 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte | ||
| CVE-2021-29457 | — | < 0.27.5-3.1 | 0.27.5-3.1 | Apr 19, 2021 | Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted im | ||
| CVE-2019-13108 | — | < 0.27.5-3.1 | 0.27.5-3.1 | Jun 30, 2019 | An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset. | ||
| CVE-2019-13114 | — | < 0.27.5-4.1 | 0.27.5-4.1 | Jun 30, 2019 | http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character. | ||
| CVE-2018-19607 | — | < 0.27.5-4.1 | 0.27.5-4.1 | Nov 27, 2018 | Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. | ||
| CVE-2018-19108 | — | < 0.27.5-4.1 | 0.27.5-4.1 | Nov 8, 2018 | In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file. | ||
| CVE-2018-17282 | Med | 6.5 | < 0.27.5-4.1 | 0.27.5-4.1 | Sep 20, 2018 | An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference. | |
| CVE-2018-17230 | Med | 6.5 | < 0.27.5-4.1 | 0.27.5-4.1 | Sep 19, 2018 | Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. | |
| CVE-2018-17229 | Med | 6.5 | < 0.27.5-4.1 | 0.27.5-4.1 | Sep 19, 2018 | Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. | |
| CVE-2018-12264 | Hig | 8.8 | < 0.27.4-1.2 | 0.27.4-1.2 | Jun 13, 2018 | Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. | |
| CVE-2018-9305 | Hig | 8.1 | < 0.27.5-4.1 | 0.27.5-4.1 | Apr 4, 2018 | In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case. | |
| CVE-2017-17725 | Med | 6.5 | < 0.27.5-8.1 | 0.27.5-8.1 | Feb 12, 2018 | In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from | |
| CVE-2017-1000128 | Med | 5.5 | < 0.27.4-1.2 | 0.27.4-1.2 | Nov 17, 2017 | Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser | |
| CVE-2017-1000126 | Med | 5.5 | < 0.27.5-4.1 | 0.27.5-4.1 | Nov 17, 2017 | exiv2 0.26 contains a Stack out of bounds read in webp parser | |
| CVE-2017-14864 | Med | 5.5 | < 0.27.4-1.2 | 0.27.4-1.2 | Sep 29, 2017 | An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. | |
| CVE-2017-14862 | Med | 5.5 | < 0.27.4-1.2 | 0.27.4-1.2 | Sep 29, 2017 | An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. | |
| CVE-2017-14860 | Med | 5.5 | < 0.27.4-1.2 | 0.27.4-1.2 | Sep 29, 2017 | There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. | |
| CVE-2017-14859 | Med | 5.5 | < 0.27.4-1.2 | 0.27.4-1.2 | Sep 29, 2017 | An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. |
- CVE-2021-29463Apr 30, 2021affected < 0.27.5-6.1fixed 0.27.5-6.1
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte
- CVE-2021-29470Apr 23, 2021affected < 0.27.5-3.1fixed 0.27.5-3.1
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte
- CVE-2021-29458Apr 19, 2021affected < 0.27.5-11.1fixed 0.27.5-11.1
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafte
- CVE-2021-29457Apr 19, 2021affected < 0.27.5-3.1fixed 0.27.5-3.1
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted im
- CVE-2019-13108Jun 30, 2019affected < 0.27.5-3.1fixed 0.27.5-3.1
An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a zero value for iccOffset.
- CVE-2019-13114Jun 30, 2019affected < 0.27.5-4.1fixed 0.27.5-4.1
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
- CVE-2018-19607Nov 27, 2018affected < 0.27.5-4.1fixed 0.27.5-4.1
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
- CVE-2018-19108Nov 8, 2018affected < 0.27.5-4.1fixed 0.27.5-4.1
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
- affected < 0.27.5-4.1fixed 0.27.5-4.1
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
- affected < 0.27.5-4.1fixed 0.27.5-4.1
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
- affected < 0.27.5-4.1fixed 0.27.5-4.1
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
- affected < 0.27.4-1.2fixed 0.27.4-1.2
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.
- affected < 0.27.5-4.1fixed 0.27.5-4.1
In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
- affected < 0.27.5-8.1fixed 0.27.5-8.1
In Exiv2 0.26, there is an integer overflow leading to a heap-based buffer over-read in the Exiv2::getULong function in types.cpp. Remote attackers can exploit the vulnerability to cause a denial of service via a crafted image file. Note that this vulnerability is different from
- affected < 0.27.4-1.2fixed 0.27.4-1.2
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
- affected < 0.27.5-4.1fixed 0.27.5-4.1
exiv2 0.26 contains a Stack out of bounds read in webp parser
- affected < 0.27.4-1.2fixed 0.27.4-1.2
An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
- affected < 0.27.4-1.2fixed 0.27.4-1.2
An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
- affected < 0.27.4-1.2fixed 0.27.4-1.2
There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
- affected < 0.27.4-1.2fixed 0.27.4-1.2
An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and application crash, which leads to denial of service.
Page 2 of 3