CVE-2017-11336: Medium severity centos dos2unix vulnerability
Published Jul 16, 2017
·Updated
There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted input will lead to a remote denial of service attack.
Affected Software
1 affected component
exiv2 exiv2=0.26
Event History
Jul 16, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11336?
CVE-2017-11336 is classified as a medium severity vulnerability due to the potential for a remote denial of service.
2
How do I fix CVE-2017-11336?
To fix CVE-2017-11336, upgrade to a patched version of Exiv2 that addresses the heap-based buffer over-read issue.
3
What type of attack does CVE-2017-11336 facilitate?
CVE-2017-11336 facilitates a remote denial of service attack through crafted input.
4
Which version of Exiv2 is affected by CVE-2017-11336?
CVE-2017-11336 affects Exiv2 version 0.26.
5
What is the impact of CVE-2017-11336 on systems using Exiv2?
The impact of CVE-2017-11336 on systems using Exiv2 includes potential service outages due to denial of service.