PT-2018-18755 · Exiv2+4 · Exiv2+4

Xiaoqx

·

Publicado

2018-03-25

·

Atualizado

2022-10-17

·

CVE-2018-8977

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26
Description The issue allows remote attackers to cause a denial of service due to invalid memory access via a crafted file. This is related to the Exiv2::Internal::printCsLensFFFF function in canonmn int.cpp.
Recommendations For Exiv2 version 0.26, consider avoiding the use of crafted files that may trigger the denial of service until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

ALT-PU-2018-2105
ALT-PU-2019-2468
ALT-PU-2019-2590
CESA-2019_2101
CVE-2018-8977
OPENSUSE-SU-2022_3598-1
RHSA-2019:2101
RHSA-2019_2101
SUSE-SU-2022:3598-1

Produtos afetados

Alt Linux
Centos
Exiv2
Red Hat
Suse