vulnerability

Red Hat: CVE-2019-17402: CVE-2019-17402 exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (Multiple Advisories)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Oct 9, 2019
Added
Oct 1, 2020
Modified
Jul 9, 2025

Description

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the relationship of the total size to the offset and size.

Solution(s)

no-fix-redhat-rpm-packageredhat-upgrade-exiv2redhat-upgrade-exiv2-debuginforedhat-upgrade-exiv2-debugsourceredhat-upgrade-exiv2-develredhat-upgrade-exiv2-docredhat-upgrade-exiv2-libsredhat-upgrade-exiv2-libs-debuginfo
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.