PT-2022-16762 · Unknown+1 · Metadata-Extractor+1

Huang Wenjie + 2 · Published 2022-02-24 · Updated 2024-01-12 · CVE-2022-24613

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions metadata-extractor versions up to 2.16.0

Description The issue allows an application crash due to uncaught exceptions when parsing a specially crafted JPEG file, potentially leading to a denial of service attack against services using the metadata-extractor library.

Recommendations For metadata-extractor versions up to 2.16.0, update to a version later than 2.16.0 to resolve the issue. At the moment, there is no information about other specific mitigation measures for this vulnerability.

Exploit

Fix

DoS

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-24613

GHSA-P5PG-WM9Q-8V6R

OESA-2024-1023

OESA-2024-1024

OESA-2024-1025

OESA-2024-1054

Affected Products

Debian

Metadata-Extractor

References · 20

• 🔥 https://github.com/drewnoakes/metadata-extractor/issues/561 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24613 · Security Note
• https://osv.dev/vulnerability/OESA-2024-1025 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1054 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-24613 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24613 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24613 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1023 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2024-1024 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p5pg-wm9q-8v6r · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24613 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24614 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-24613 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-24613 · Vendor Advisory
• https://github.com/drewnoakes/metadata-extractor · Note