PT-2021-19233 · Exiv2+7 · Exiv2+7

Published 2021-07-26 · Updated 2024-06-15 · CVE-2021-31291

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Exiv2 version 0.27.3

Description A heap-based buffer overflow issue in the jp2image.cpp component allows attackers to cause a denial of service via crafted metadata.

Recommendations For Exiv2 version 0.27.3, consider updating to a newer version that contains a fix for this issue, as no specific workaround is provided for this version.

Fix

Related Identifiers

ALSA-2021:3152

CESA-2021_3152

CESA-2021_3153

CESA-2021_3158

CVE-2021-31291

DLA-2750-1

MGASA-2021-0396

OPENSUSE-SU-2022_3598-1

OPENSUSE-SU-2022_3889-1

OPENSUSE-SU-2024:12381-1

RHSA-2021:3152

RHSA-2021:3153

RHSA-2021:3158

RHSA-2021:3230

RHSA-2021:3231

RHSA-2021:3232

RHSA-2021:3233

RHSA-2021:3234

RHSA-2021_3152

RHSA-2021_3153

RHSA-2021_3158

RHSA-2021_3233

RHSA-2021_3234

RLSA-2021:3152

RLSA-2021:3153

SUSE-SU-2022:3543-1

SUSE-SU-2022:3598-1

SUSE-SU-2022:3889-1

SUSE-SU-2022:4252-1

SUSE-SU-2022_3543-1

USN-5028-1

Affected Products

Almalinux

Centos

Exiv2

Linuxmint

Red Hat

Rocky Linux

Suse

Ubuntu

References · 94

• https://osv.dev/vulnerability/SUSE-SU-2022:3543-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5028-1 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:3153 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-31291 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12381-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-3153.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0396 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2021:3152 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:3153 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5028-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-3234.html · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-31291 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-31291 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2021-3152.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3889-1 · Vendor Advisory