PT-2019-6171 · Exiv2+6 · Exiv2+6

Published 2019-03-13 · Updated 2022-10-26 · CVE-2020-18898

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27

Description The issue is related to a stack exhaustion problem in the printIFDStructure function of the Exiv2 library. This allows a remote attacker to cause a denial of service (DOS) by using a specially crafted file. The exploitation of this issue can lead to a service disruption.

Recommendations For Exiv2 version 0.27, consider disabling the printIFDStructure function as a temporary workaround until a patch is available. Restrict access to the Exiv2 library to minimize the risk of exploitation. Avoid using the Exiv2 library with untrusted files until the issue is resolved.

Exploit

Fix

DoS

Uncontrolled Recursion

Memory Corruption

Weakness Enumeration

CWE-674

CWE-787

Related Identifiers

ALSA-2022:1797

ALSA-2022:1842

BDU:2022-01660

CESA-2022_1797

CESA-2022_1842

CVE-2020-18898

OPENSUSE-SU-2022_3598-1

RHSA-2022:1797

RHSA-2022:1842

RHSA-2022_1797

RHSA-2022_1842

RLSA-2022:1797

RLSA-2022:1842

SUSE-SU-2022:3598-1

Affected Products

Almalinux

Centos

Debian

Exiv2

Red Hat

Rocky Linux

Suse

References · 56

• 🔥 https://github.com/Exiv2/exiv2/issues/741 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-18898 · Security Note
• https://bdu.fstec.ru/vul/2022-01660 · Security Note
• https://errata.rockylinux.org/RLSA-2022:1842 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-18898 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2022:1797 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1842 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-1842.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-18898 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:3598-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2022-1797.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1797.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2022:1797 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2022-1842.html · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2022:1842 · Vendor Advisory