In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade exiv2-docUpgrade libgexiv2-develUpgrade gnome-color-managerUpgrade geglUpgrade exiv2-develUpgrade libgexiv2 | May 4, 2022 | Apr 4, 2018 |
| Centos_linux | — | Upgrade gnome-color-manager-debuginfoUpgrade libgexiv2Upgrade libgexiv2-debuginfoUpgrade libgexiv2-debugsourceUpgrade exiv2-libsUpgrade exiv2-libs-debuginfoUpgrade gnome-color-managerUpgrade exiv2-debuginfoUpgrade gegl-debugsourceUpgrade gegl-debuginfoUpgrade exiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade exiv2Upgrade gegl | Apr 29, 2020 | Apr 4, 2018 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Nov 26, 2018 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade exiv2Upgrade libgexiv2Upgrade exiv2-libsUpgrade gnome-color-managerUpgrade exiv2-docUpgrade geglUpgrade exiv2-develUpgrade libgexiv2-devel | Oct 5, 2022 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade geglUpgrade gegl-debuginfoUpgrade exiv2Upgrade exiv2-libsUpgrade exiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade gegl-debugsourceUpgrade libgexiv2Upgrade exiv2-develUpgrade libgexiv2-debuginfoUpgrade gnome-color-manager-debuginfoUpgrade exiv2-debuginfoUpgrade libgexiv2-debugsourceUpgrade exiv2-libs-debuginfoUpgrade exiv2-docUpgrade gnome-color-managerUpgrade libgexiv2-devel | Apr 29, 2020 | Apr 4, 2018 |
| Rocky_linux | — | Upgrade exiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade gegl-debugsourceUpgrade exiv2Upgrade gnome-color-manager-debuginfoUpgrade gegl-debuginfoUpgrade exiv2-libs-debuginfoUpgrade libgexiv2Upgrade libgexiv2-debugsourceUpgrade exiv2-debuginfoUpgrade libgexiv2-develUpgrade exiv2-libsUpgrade exiv2-develUpgrade gnome-color-managerUpgrade geglUpgrade libgexiv2-debuginfo | Mar 12, 2024 | Apr 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub