In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade geglUpgrade exiv2-develUpgrade libgexiv2Upgrade gnome-color-managerUpgrade exiv2-docUpgrade libgexiv2-devel | May 4, 2022 | Apr 4, 2018 |
| Centos_linux | — | Upgrade gegl-debuginfoUpgrade exiv2Upgrade geglUpgrade gnome-color-manager-debugsourceUpgrade exiv2-debugsourceUpgrade libgexiv2-debugsourceUpgrade exiv2-libs-debuginfoUpgrade gnome-color-managerUpgrade exiv2-libsUpgrade exiv2-debuginfoUpgrade libgexiv2Upgrade gegl-debugsourceUpgrade gnome-color-manager-debuginfoUpgrade libgexiv2-debuginfo | Apr 29, 2020 | Apr 4, 2018 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Nov 26, 2018 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade libgexiv2Upgrade exiv2-docUpgrade gnome-color-managerUpgrade exiv2Upgrade exiv2-libsUpgrade exiv2-develUpgrade geglUpgrade libgexiv2-devel | Oct 5, 2022 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade exiv2-debugsourceUpgrade gegl-debuginfoUpgrade gnome-color-manager-debugsourceUpgrade exiv2-libsUpgrade exiv2Upgrade geglUpgrade exiv2-docUpgrade gnome-color-managerUpgrade exiv2-debuginfoUpgrade gnome-color-manager-debuginfoUpgrade libgexiv2-develUpgrade exiv2-libs-debuginfoUpgrade libgexiv2-debuginfoUpgrade gegl-debugsourceUpgrade exiv2-develUpgrade libgexiv2-debugsourceUpgrade libgexiv2 | Apr 29, 2020 | Apr 4, 2018 |
| Rocky_linux | — | Upgrade libgexiv2-develUpgrade libgexiv2-debugsourceUpgrade exiv2-libs-debuginfoUpgrade libgexiv2Upgrade gnome-color-managerUpgrade libgexiv2-debuginfoUpgrade exiv2-develUpgrade exiv2-libsUpgrade exiv2-debuginfoUpgrade geglUpgrade gnome-color-manager-debuginfoUpgrade exiv2-debugsourceUpgrade exiv2Upgrade gegl-debuginfoUpgrade gegl-debugsourceUpgrade gnome-color-manager-debugsource | Mar 12, 2024 | Apr 4, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub