PT-2021-7920 · Exiv2+9 · Exiv2+9

Published 2021-04-23 · Updated 2025-01-10 · CVE-2021-29470

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Exiv2 versions v0.27.3 and earlier

Description The issue is related to an out-of-bounds read in Exiv2, which can be triggered when the utility is used to write metadata into a crafted image file. This could potentially allow an attacker to cause a denial of service by crashing Exiv2 if they can trick the victim into running Exiv2 on a crafted image file. The bug is only triggered when writing metadata, a less frequently used operation than reading metadata.

Recommendations For Exiv2 versions v0.27.3 and earlier, update to version v0.27.4 to resolve the issue. As a temporary workaround, consider avoiding the use of Exiv2 to write metadata into image files until the update is applied. Restrict access to crafted image files to minimize the risk of exploitation.

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2021:4173

ALT-PU-2021-2006

ALT-PU-2024-13399

AZL-7210

BDU:2023-05477

CESA-2021_4173

CVE-2021-29470

GHSA-8949-HHFH-J7RJ

MGASA-2021-0240

OESA-2021-1183

OPENSUSE-SU-2022_3598-1

OPENSUSE-SU-2022_3889-1

OPENSUSE-SU-2024:12381-1

RHSA-2021:4173

RHSA-2021_4173

RLSA-2021:4173

SUSE-SU-2022:3598-1

SUSE-SU-2022:3889-1

USN-4941-1

Affected Products

Alt Linux

Almalinux

Centos

Exiv2

Linuxmint

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 130

• https://github.com/Exiv2/exiv2/pull/1581 · Patch
• https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-29470 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2021:4173 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7210 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1183 · Vendor Advisory
• https://security.gentoo.org/glsa/202312-06 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/5I3RRZUGSBIUYZ5TIHLN55PKMAWCSJ5G · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12381-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29470 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBKWLTXM7IKZ4PVGKLUQVAVFAYGGF7QR · Vendor Advisory
• https://osv.dev/vulnerability/USN-4941-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-29470 · Security Note
• https://ubuntu.com/security/notices/USN-4941-1 · Vendor Advisory