Published: 02/09/2018 Updated: 03/10/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote malicious users to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exiv2 exiv2 0.26
canonical ubuntu linux 16.04
debian debian linux 8.0
canonical ubuntu linux 18.10
canonical ubuntu linux 18.04
canonical ubuntu linux 14.04

Debian Bug report logs - #916081 exiv2: CVE-2018-16336 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 9 Dec 2018 21:09:01 UTC Severity: important Tags: fixed-upstream, patch, security, u ...

Several security issues were fixed in Exiv2 ...

Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v026 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file, a different vulnerability than CVE-2018-10999 ...

CWE-125 https://github.com/Exiv2/exiv2/issues/400 https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html https://usn.ubuntu.com/3852-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916081 https://usn.ubuntu.com/3852-1/https://nvd.nist.gov

CVE-2018-16336

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect