PT-2018-12453 · Exiv2+6 · Exiv2+6

Rootup · Publicado 2018-07-14 · Atualizado 2020-04-28 · CVE-2018-14338

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to the misuse of the realpath function in the example code of Exiv2 on POSIX platforms, excluding Apple platforms where glibc is not used. This could potentially lead to a buffer overflow.

Recommendations For Exiv2 version 0.26, consider applying a patch or fix to correctly use the realpath function to prevent potential buffer overflow issues. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALSA-2020:1577

ALT-PU-2019-2468

ALT-PU-2019-2590

CESA-2020_1577

CVE-2018-14338

RHSA-2020:1577

RHSA-2020_1577

RLSA-2020:1577

Produtos afetados

Alt Linux

Almalinux

Centos

Debian

Exiv2

Red Hat

Rocky Linux

Referências · 73

• 🔥 https://github.com/Exiv2/exiv2/issues/382 · Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=1660426 · Nota
• https://vulners.com/cve/CVE-2019-13112 · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-14338 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1728484 · Nota
• https://vulners.com/cve/CVE-2018-11037 · Nota
• https://vulners.com/cve/CVE-2018-20098 · Nota
• https://vulners.com/cve/CVE-2018-9305 · Nota
• https://linux.oracle.com/errata/ELSA-2020-1577.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1757445 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1660425 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1609396 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=1632490 · Nota
• https://vulners.com/cve/CVE-2019-9143 · Nota
• https://vulners.com/cve/CVE-2018-17282 · Nota