PT-2018-3144 · Exiv2+5 · Exiv2+5
Publicado
2018-05-09
·
Atualizado
2019-09-18
·
CVE-2018-10958
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Exiv2 version 0.26
Description
The issue is related to a buffer overflow in the types.cpp component of the Exiv2 library, which can lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call. This can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Exiv2 version 0.26, consider restricting the use of the
Exiv2::Internal::PngChunk::zlibUncompress function until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Exiv2
Red Hat
Suse
Ubuntu