CVE-2018-10998

Synopsis Low: exiv2 security, bug fix, and enhancement update Type/Severity Security Advisory: Low Topic An update for exiv2 is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Low A Common Vulnerability Scoring System (CVSS) base sc ...

Several security issues were fixed in Exiv2 ...

Debian Bug report logs - #901706 exiv2: CVE-2018-12265 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 17 Jun 2018 06:33:01 UTC Severity: important Tags: fixed-upstream, security, upstream ...

Debian Bug report logs - #901707 exiv2: CVE-2018-12264 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 17 Jun 2018 06:39:02 UTC Severity: important Tags: fixed-upstream, security, upstream ...

Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed For the stable distribution (stretch), these problems have been fixed in version 025-31+deb9u1 We recommend that you upg ...

An integer underflow, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints IPTC Photo Metadata embedded in an image By persuading a victim to open a crafted image, a remote attacker could crash the application or possibly retrieve a portion of memory(CVE-2017-17724) The tEXtToDataBuf function in pngimagecpp in Exiv2 ...

An issue was discovered in Exiv2 026 readMetadata in jp2imagecpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call ...