rpm package
opensuse/exiv2&distro=openSUSE Leap 15.1
pkg:rpm/opensuse/exiv2&distro=openSUSE%20Leap%2015.1
Vulnerabilities (11)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-13114 | — | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Jun 30, 2019 | http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character. | ||
| CVE-2018-19607 | — | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Nov 27, 2018 | Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. | ||
| CVE-2018-19108 | — | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Nov 8, 2018 | In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file. | ||
| CVE-2018-17282 | Med | 6.5 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Sep 20, 2018 | An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference. | |
| CVE-2018-17230 | Med | 6.5 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Sep 19, 2018 | Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. | |
| CVE-2018-17229 | Med | 6.5 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Sep 19, 2018 | Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file. | |
| CVE-2018-12265 | Hig | 8.8 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Jun 13, 2018 | Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. | |
| CVE-2018-12264 | Hig | 8.8 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Jun 13, 2018 | Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp. | |
| CVE-2018-9305 | Hig | 8.1 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Apr 4, 2018 | In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case. | |
| CVE-2017-1000126 | Med | 5.5 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | Nov 17, 2017 | exiv2 0.26 contains a Stack out of bounds read in webp parser | |
| CVE-2017-9239 | Med | 6.5 | < 0.26-lp151.7.3.1 | 0.26-lp151.7.3.1 | May 26, 2017 | An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulne |
- CVE-2019-13114Jun 30, 2019affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
- CVE-2018-19607Nov 27, 2018affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file.
- CVE-2018-19108Nov 8, 2018affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
Exiv2::ul2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.hpp.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
exiv2 0.26 contains a Stack out of bounds read in webp parser
- affected < 0.26-lp151.7.3.1fixed 0.26-lp151.7.3.1
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulne