PT-2019-5328 · Exiv2+4 · Exiv2+4
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Exiv2 versions prior to 0.27.2
Description
The issue is caused by an integer overflow and out-of-bounds read in the CiffDirectory::readDirectory function. This allows an attacker to cause a denial of service via a crafted CRW image file. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations
For Exiv2 versions prior to 0.27.2, update to version 0.27.2 or later to resolve the issue.
At the moment, there is no other information about additional mitigation measures for this vulnerability.
Exploit
Correção
DoS
Integer Overflow
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Exiv2
Suse
Ubuntu