PT-2018-10098 · Exiv2+6 · Exiv2+6

C1208828 · Published 2018-04-12 · Updated 2022-10-17 · CVE-2018-10772

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Exiv2 versions prior to 0.27

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, or possibly have other unspecified impacts through a crafted file. This is due to the tEXtToDataBuf function in pngimage.cpp.

Recommendations For Exiv2 versions prior to 0.27, update to version 0.27 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALSA-2020:1577

ALT-PU-2019-2468

ALT-PU-2019-2590

CESA-2019_2101

CESA-2020_1577

CVE-2018-10772

OPENSUSE-SU-2022_3598-1

RHSA-2019:2101

RHSA-2019_2101

RHSA-2020:1577

RHSA-2020_1577

RLSA-2020:1577

SUSE-SU-2022:3598-1

SUSE-SU-2022_3598-1

Affected Products

Alt Linux

Almalinux

Centos

Exiv2

Red Hat

Rocky Linux

Suse

References · 348

• 🔥 https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 · Exploit
• 🔥 https://github.com/TeamSeri0us/pocs/blob/master/exiv2/1-out-of-read-Poc · Exploit
• 🔥 https://github.com/TeamSeri0us/pocs/blob/master/exiv2/2-out-of-read-Poc · Exploit
• 🔥 https://github.com/xiaoqx/pocs/tree/master/exiv2 · Exploit
• 🔥 https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1566260 · Exploit
• 🔥 https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test(exiv2) · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18915 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10998 · Security Note
• https://bdu.fstec.ru/vul/2023-01651 · Security Note
• https://bdu.fstec.ru/vul/2019-04240 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17722 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10772 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01383 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11037 · Security Note