An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because PngImage::readMetadata mishandles a chunkLength - iccOffset subtraction.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-exiv2-develalma-upgrade-exiv2-docalma-upgrade-geglalma-upgrade-gnome-color-manageralma-upgrade-libgexiv2alma-upgrade-libgexiv2-devel | May 4, 2022 | Jun 30, 2019 | |
| Alpine Linux | alpine-linux-upgrade-exiv2 | Jan 4, 2021 | Jun 30, 2019 | |
| Centos_linux | — | centos-upgrade-exiv2centos-upgrade-exiv2-debuginfocentos-upgrade-exiv2-debugsourcecentos-upgrade-exiv2-libscentos-upgrade-exiv2-libs-debuginfocentos-upgrade-geglcentos-upgrade-gegl-debuginfocentos-upgrade-gegl-debugsourcecentos-upgrade-gnome-color-managercentos-upgrade-gnome-color-manager-debuginfocentos-upgrade-gnome-color-manager-debugsourcecentos-upgrade-libgexiv2centos-upgrade-libgexiv2-debuginfocentos-upgrade-libgexiv2-debugsource | Apr 29, 2020 | Jun 30, 2019 |
| Debian | debian-upgrade-exiv2 | Jul 30, 2024 | Jun 30, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-exiv2huawei-euleros-2_0_sp8-upgrade-exiv2-libs | Apr 21, 2020 | Jun 30, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-exiv2oracle-linux-upgrade-exiv2-develoracle-linux-upgrade-exiv2-docoracle-linux-upgrade-exiv2-libsoracle-linux-upgrade-gegloracle-linux-upgrade-gnome-color-manageroracle-linux-upgrade-libgexiv2oracle-linux-upgrade-libgexiv2-devel | Oct 5, 2022 | Jun 30, 2019 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-exiv2redhat-upgrade-exiv2-debuginforedhat-upgrade-exiv2-debugsourceredhat-upgrade-exiv2-develredhat-upgrade-exiv2-docredhat-upgrade-exiv2-libsredhat-upgrade-exiv2-libs-debuginforedhat-upgrade-geglredhat-upgrade-gegl-debuginforedhat-upgrade-gegl-debugsourceredhat-upgrade-gnome-color-managerredhat-upgrade-gnome-color-manager-debuginforedhat-upgrade-gnome-color-manager-debugsourceredhat-upgrade-libgexiv2redhat-upgrade-libgexiv2-debuginforedhat-upgrade-libgexiv2-debugsourceredhat-upgrade-libgexiv2-devel | Apr 29, 2020 | Jun 30, 2019 | |
| Rocky_linux | rocky-upgrade-exiv2rocky-upgrade-exiv2-debuginforocky-upgrade-exiv2-debugsourcerocky-upgrade-exiv2-develrocky-upgrade-exiv2-libsrocky-upgrade-exiv2-libs-debuginforocky-upgrade-geglrocky-upgrade-gegl-debuginforocky-upgrade-gegl-debugsourcerocky-upgrade-gnome-color-managerrocky-upgrade-gnome-color-manager-debuginforocky-upgrade-gnome-color-manager-debugsourcerocky-upgrade-libgexiv2rocky-upgrade-libgexiv2-debuginforocky-upgrade-libgexiv2-debugsourcerocky-upgrade-libgexiv2-devel | Mar 12, 2024 | Jun 30, 2019 | |
| Suse | — | suse-upgrade-exiv2suse-upgrade-exiv2-langsuse-upgrade-libexiv2-26suse-upgrade-libexiv2-26-32bitsuse-upgrade-libexiv2-develsuse-upgrade-libexiv2-doc | Aug 9, 2024 | Jun 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub