In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade exiv2-docUpgrade libgexiv2-develUpgrade gnome-color-managerUpgrade exiv2-develUpgrade libgexiv2Upgrade gegl | May 4, 2022 | Apr 4, 2018 |
| Centos_linux | — | Upgrade gnome-color-manager-debugsourceUpgrade geglUpgrade exiv2-debugsourceUpgrade exiv2Upgrade gegl-debuginfoUpgrade exiv2-libsUpgrade gegl-debugsourceUpgrade exiv2-debuginfoUpgrade libgexiv2-debuginfoUpgrade gnome-color-managerUpgrade gnome-color-manager-debuginfoUpgrade exiv2-libs-debuginfoUpgrade libgexiv2-debugsourceUpgrade libgexiv2 | Apr 29, 2020 | Apr 4, 2018 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Nov 26, 2018 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade exiv2-develUpgrade libgexiv2-develUpgrade geglUpgrade exiv2-libsUpgrade gnome-color-managerUpgrade exiv2Upgrade libgexiv2Upgrade exiv2-doc | Oct 5, 2022 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade geglUpgrade exiv2-libsUpgrade exiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade exiv2Upgrade gegl-debuginfoUpgrade libgexiv2-debuginfoUpgrade exiv2-debuginfoUpgrade libgexiv2-develUpgrade libgexiv2Upgrade libgexiv2-debugsourceUpgrade gnome-color-manager-debuginfoUpgrade gnome-color-managerUpgrade exiv2-develUpgrade exiv2-docUpgrade exiv2-libs-debuginfoUpgrade gegl-debugsource | Apr 29, 2020 | Apr 4, 2018 |
| Rocky_linux | — | Upgrade gnome-color-manager-debugsourceUpgrade gegl-debugsourceUpgrade gegl-debuginfoUpgrade gnome-color-manager-debuginfoUpgrade exiv2-debugsourceUpgrade exiv2Upgrade libgexiv2Upgrade exiv2-libs-debuginfoUpgrade exiv2-libsUpgrade libgexiv2-debugsourceUpgrade exiv2-debuginfoUpgrade gnome-color-managerUpgrade geglUpgrade libgexiv2-develUpgrade libgexiv2-debuginfoUpgrade exiv2-devel | Mar 12, 2024 | Apr 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub