PT-2021-28371 · Exiv2 · Exiv2

Published 2021-07-13 · Updated 2021-07-13

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Exiv2 version 0.27.1

Description: A buffer overflow issue in the Databuf function in types.cpp leads to a denial of service.

Recommendations: For Exiv2 version 0.27.1, update to a newer version that contains a fix for this issue.

Fix

Related Identifiers

PYSEC-2021-886

Affected Products

Exiv2

References · 3

• https://osv.dev/vulnerability/PYSEC-2021-886 · Vendor Advisory
• https://github.com/Exiv2/exiv2/issues/980 · Note
• https://lists.debian.org/debian-lts-announce/2022/11/msg00013.html · Note