PT-2018-3145 · Exiv2+5 · Exiv2+5

Published 2018-05-12 · Updated 2023-03-01 · CVE-2018-10998

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.26

Description The issue is related to incorrect error handling in the jp2image.cpp component of the Exiv2 library for managing media file metadata. Exploitation of this issue may allow a remote attacker to cause a denial of service (SIGABRT) by triggering an incorrect call to the Safe::add function.

Recommendations For Exiv2 version 0.26, consider disabling the readMetadata function in jp2image.cpp as a temporary workaround until a patch is available. Restrict access to the jp2image.cpp component to minimize the risk of exploitation. Avoid using the Safe::add function in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-388

Related Identifiers

ALT-PU-2018-2105

ALT-PU-2019-2468

ALT-PU-2019-2590

BDU:2019-04240

CESA-2019_2101

CVE-2018-10998

DLA-1402-1

DSA-4238-1

RHSA-2019:2101

RHSA-2019_2101

SUSE-SU-2018:3882-1

SUSE-SU-2018:3882-2

USN-3700-1

Affected Products

Alt Linux

Centos

Exiv2

Red Hat

Suse

Ubuntu

References · 55

• 🔥 https://github.com/Exiv2/exiv2/issues/303 · Exploit
• 🔥 https://github.com/TeamSeri0us/pocs/blob/master/exiv2/2-out-of-read-Poc · Exploit
• 🔥 https://github.com/TeamSeri0us/pocs/blob/master/exiv2/1-out-of-read-Poc · Exploit
• 🔥 https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206 · Exploit
• 🔥 https://github.com/xiaoqx/pocs/tree/master/exiv2 · Exploit
• 🔥 https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md · Exploit
• 🔥 https://github.com/lolo-pop/poc/tree/master/Segmentation%20fault%20in%20convert-test(exiv2) · Exploit
• https://osv.dev/vulnerability/DSA-4238-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10998 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10998 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-10998 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2101 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10998 · Vendor Advisory
• https://security.gentoo.org/glsa/201811-14 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-12265 · Vendor Advisory