Published: 25/02/2019 Updated: 24/08/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

An issue exists in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an malicious user to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.

Vulnerable Product	Search on Vulmon	Subscribe to Product
exiv2 exiv2 0.27

Synopsis Moderate: exiv2 security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for exiv2, gegl, gnome-color-manager, and libgexiv2 is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moder ...

Debian Bug report logs - #923472 exiv2: CVE-2019-9143 Package: src:exiv2; Maintainer for src:exiv2 is Debian KDE Extras Team <pkg-kde-extras@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Thu, 28 Feb 2019 16:33:04 UTC Severity: grave Tags: fixed-upstream, security, upstream Fou ...

Impact: Low Public Date: 2019-02-21 CWE: CWE-835 Bugzilla: 1684381: CVE-2019-9143 exiv2: infinite recur ...

CWE-674 https://research.loginsoft.com/bugs/uncontrolled-recursion-loop-in-exiv2imageprinttiffstructure-exiv2-0-27/https://github.com/Exiv2/exiv2/issues/711 http://www.securityfocus.com/bid/107161 https://access.redhat.com/errata/RHSA-2020:1577 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2019-9143

CVE-2019-9143

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect