In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade exiv2-develUpgrade libgexiv2Upgrade geglUpgrade gnome-color-managerUpgrade libgexiv2-develUpgrade exiv2-doc | May 4, 2022 | Apr 4, 2018 |
| Centos_linux | — | Upgrade libgexiv2-debugsourceUpgrade exiv2-libsUpgrade exiv2-libs-debuginfoUpgrade gnome-color-managerUpgrade libgexiv2-debuginfoUpgrade gnome-color-manager-debuginfoUpgrade gegl-debugsourceUpgrade libgexiv2Upgrade exiv2-debuginfoUpgrade exiv2Upgrade gnome-color-manager-debugsourceUpgrade geglUpgrade gegl-debuginfoUpgrade exiv2-debugsource | Apr 29, 2020 | Apr 4, 2018 |
| Gentoo Linux | — | Upgrade media-gfx/exiv2. | Nov 26, 2018 | Apr 4, 2018 |
| Oracle_linux | — | Upgrade exiv2-develUpgrade geglUpgrade libgexiv2-develUpgrade libgexiv2Upgrade exiv2Upgrade exiv2-libsUpgrade exiv2-docUpgrade gnome-color-manager | Oct 5, 2022 | Apr 4, 2018 |
| Redhat_linux | — | Upgrade exiv2Upgrade gnome-color-manager-debugsourceUpgrade exiv2-debugsourceUpgrade exiv2-libsUpgrade gegl-debuginfoUpgrade geglUpgrade exiv2-develUpgrade libgexiv2-develUpgrade gnome-color-manager-debuginfoUpgrade exiv2-debuginfoUpgrade libgexiv2-debugsourceUpgrade libgexiv2Upgrade exiv2-libs-debuginfoUpgrade exiv2-docUpgrade gegl-debugsourceUpgrade libgexiv2-debuginfoUpgrade gnome-color-manager | Apr 29, 2020 | Apr 4, 2018 |
| Rocky_linux | — | Upgrade gnome-color-manager-debuginfoUpgrade exiv2Upgrade exiv2-debugsourceUpgrade gegl-debugsourceUpgrade gegl-debuginfoUpgrade gnome-color-manager-debugsourceUpgrade libgexiv2-debuginfoUpgrade gnome-color-managerUpgrade libgexiv2Upgrade exiv2-develUpgrade exiv2-libsUpgrade exiv2-debuginfoUpgrade libgexiv2-debugsourceUpgrade exiv2-libs-debuginfoUpgrade geglUpgrade libgexiv2-devel | Mar 12, 2024 | Apr 4, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub