PT-2018-3145 · Exiv2+5 · Exiv2+5
Publicado
2018-05-12
·
Atualizado
2023-03-01
·
CVE-2018-10998
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Exiv2 version 0.26
Description
The issue is related to incorrect error handling in the jp2image.cpp component of the Exiv2 library for managing media file metadata. Exploitation of this issue may allow a remote attacker to cause a denial of service (SIGABRT) by triggering an incorrect call to the
Safe::add function.Recommendations
For Exiv2 version 0.26, consider disabling the
readMetadata function in jp2image.cpp as a temporary workaround until a patch is available. Restrict access to the jp2image.cpp component to minimize the risk of exploitation. Avoid using the Safe::add function in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Exiv2
Red Hat
Suse
Ubuntu