Name: CVE-2018-11037: Exposure of Sensitive Information to an Unauthorized Actor
Published: 2018-05-14T00:00:00.000Z
Keywords: CVE, CVE-2018-11037, CWE-200, CVSS 6.5, EPSS 0.02363

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	View advisory ↗View advisory ↗	alma-upgrade-exiv2-develalma-upgrade-exiv2-docalma-upgrade-geglalma-upgrade-gnome-color-manageralma-upgrade-libgexiv2alma-upgrade-libgexiv2-devel	May 4, 2022	May 14, 2018
Amazon Linux Ami 2	View advisory ↗	amazon-linux-ami-2-upgrade-exiv2amazon-linux-ami-2-upgrade-exiv2-debuginfoamazon-linux-ami-2-upgrade-exiv2-develamazon-linux-ami-2-upgrade-exiv2-docamazon-linux-ami-2-upgrade-exiv2-libs	Apr 27, 2020	May 14, 2018
Centos_linux	—	centos-upgrade-exiv2centos-upgrade-exiv2-debuginfocentos-upgrade-exiv2-debugsourcecentos-upgrade-exiv2-develcentos-upgrade-exiv2-doccentos-upgrade-exiv2-libscentos-upgrade-exiv2-libs-debuginfocentos-upgrade-geglcentos-upgrade-gegl-debuginfocentos-upgrade-gegl-debugsourcecentos-upgrade-gnome-color-managercentos-upgrade-gnome-color-manager-debuginfocentos-upgrade-gnome-color-manager-debugsourcecentos-upgrade-libgexiv2centos-upgrade-libgexiv2-debuginfocentos-upgrade-libgexiv2-debugsource	Aug 28, 2019	May 14, 2018
Debian	View advisory ↗	debian-upgrade-exiv2	Jul 30, 2024	May 14, 2018
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-media-gfx-exiv2	Nov 26, 2018	May 13, 2018
Huawei Euleros 2_0_sp8	View advisory ↗	huawei-euleros-2_0_sp8-upgrade-exiv2huawei-euleros-2_0_sp8-upgrade-exiv2-libs	Apr 21, 2020	May 14, 2018
Oracle_linux	—	oracle-linux-upgrade-exiv2oracle-linux-upgrade-exiv2-develoracle-linux-upgrade-exiv2-docoracle-linux-upgrade-exiv2-libsoracle-linux-upgrade-gegloracle-linux-upgrade-gnome-color-manageroracle-linux-upgrade-libgexiv2oracle-linux-upgrade-libgexiv2-devel	Jul 21, 2020	May 13, 2018
Redhat_linux	View advisory ↗	redhat-upgrade-exiv2redhat-upgrade-exiv2-debuginforedhat-upgrade-exiv2-debugsourceredhat-upgrade-exiv2-develredhat-upgrade-exiv2-docredhat-upgrade-exiv2-libsredhat-upgrade-exiv2-libs-debuginforedhat-upgrade-geglredhat-upgrade-gegl-debuginforedhat-upgrade-gegl-debugsourceredhat-upgrade-gnome-color-managerredhat-upgrade-gnome-color-manager-debuginforedhat-upgrade-gnome-color-manager-debugsourceredhat-upgrade-libgexiv2redhat-upgrade-libgexiv2-debuginforedhat-upgrade-libgexiv2-debugsourceredhat-upgrade-libgexiv2-devel	Aug 7, 2019	May 14, 2018
Rocky_linux	View advisory ↗View advisory ↗	rocky-upgrade-exiv2rocky-upgrade-exiv2-debuginforocky-upgrade-exiv2-debugsourcerocky-upgrade-exiv2-develrocky-upgrade-exiv2-libsrocky-upgrade-exiv2-libs-debuginforocky-upgrade-geglrocky-upgrade-gegl-debuginforocky-upgrade-gegl-debugsourcerocky-upgrade-gnome-color-managerrocky-upgrade-gnome-color-manager-debuginforocky-upgrade-gnome-color-manager-debugsourcerocky-upgrade-libgexiv2rocky-upgrade-libgexiv2-debuginforocky-upgrade-libgexiv2-debugsourcerocky-upgrade-libgexiv2-devel	Mar 12, 2024	May 14, 2018

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub