Published: 12/05/2018 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An issue exists in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exiv2 exiv2 0.26
debian debian linux 8.0
debian debian linux 9.0
canonical ubuntu linux 14.04
canonical ubuntu linux 17.10
canonical ubuntu linux 18.04
canonical ubuntu linux 16.04

Several security issues were fixed in Exiv2 ...

Several vulnerabilities have been discovered in Exiv2, a C++ library and a command line utility to manage image metadata which could result in denial of service or the execution of arbitrary code if a malformed file is parsed For the stable distribution (stretch), these problems have been fixed in version 025-31+deb9u1 We recommend that you upg ...

Debian Bug report logs - #901706 exiv2: CVE-2018-12265 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 17 Jun 2018 06:33:01 UTC Severity: important Tags: fixed-upstream, security, upstream ...

Debian Bug report logs - #916081 exiv2: CVE-2018-16336 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 9 Dec 2018 21:09:01 UTC Severity: important Tags: fixed-upstream, patch, security, u ...

Debian Bug report logs - #901707 exiv2: CVE-2018-12264 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 17 Jun 2018 06:39:02 UTC Severity: important Tags: fixed-upstream, security, upstream ...

An issue was discovered in Exiv2 026 The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read ...

CWE-125 https://github.com/Exiv2/exiv2/issues/306 https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html https://www.debian.org/security/2018/dsa-4238 https://usn.ubuntu.com/3700-1/https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html https://security.gentoo.org/glsa/201811-14 https://usn.ubuntu.com/3700-1/https://nvd.nist.gov

CVE-2018-10999

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect