In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libgexiv2-develUpgrade exiv2-docUpgrade exiv2-develUpgrade geglUpgrade gnome-color-managerUpgrade libgexiv2 | May 4, 2022 | Apr 4, 2018 |
| Centos_linux | — | Upgrade exiv2-libs-debuginfoUpgrade libgexiv2-debuginfoUpgrade libgexiv2Upgrade gegl-debugsourceUpgrade gnome-color-manager-debuginfoUpgrade exiv2-debuginfoUpgrade exiv2-libsUpgrade gnome-color-managerUpgrade libgexiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade exiv2-debugsourceUpgrade exiv2Upgrade geglUpgrade gegl-debuginfo | Apr 29, 2020 | Apr 4, 2018 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Nov 26, 2018 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade libgexiv2-develUpgrade exiv2-develUpgrade geglUpgrade exiv2Upgrade gnome-color-managerUpgrade exiv2-docUpgrade libgexiv2Upgrade exiv2-libs | Oct 5, 2022 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade exiv2-develUpgrade exiv2-docUpgrade libgexiv2Upgrade libgexiv2-debugsourceUpgrade gnome-color-manager-debuginfoUpgrade exiv2-libs-debuginfoUpgrade exiv2-debuginfoUpgrade gegl-debugsourceUpgrade libgexiv2-debuginfoUpgrade libgexiv2-develUpgrade gnome-color-managerUpgrade gegl-debuginfoUpgrade exiv2-debugsourceUpgrade exiv2-libsUpgrade exiv2Upgrade geglUpgrade gnome-color-manager-debugsource | Apr 29, 2020 | Apr 4, 2018 |
| Rocky_linux | — | Upgrade libgexiv2-develUpgrade libgexiv2-debuginfoUpgrade gnome-color-managerUpgrade exiv2-libsUpgrade exiv2-libs-debuginfoUpgrade libgexiv2-debugsourceUpgrade exiv2-debuginfoUpgrade geglUpgrade libgexiv2Upgrade exiv2-develUpgrade gegl-debuginfoUpgrade gegl-debugsourceUpgrade exiv2-debugsourceUpgrade gnome-color-manager-debugsourceUpgrade exiv2Upgrade gnome-color-manager-debuginfo | Mar 12, 2024 | Apr 4, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub