CVE-2017-11338: Medium severity centos dos2unix vulnerability
Published Jul 16, 2017
·Updated
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
Affected Software
1 affected component
exiv2 exiv2=0.26
Event History
Jul 16, 2017
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-11338?
CVE-2017-11338 has a severity level of medium due to its potential for denial of service.
2
How do I fix CVE-2017-11338?
To fix CVE-2017-11338, upgrade to Exiv2 version 0.26.1 or later.
3
What type of vulnerability is CVE-2017-11338?
CVE-2017-11338 is a denial of service vulnerability caused by an infinite loop.
4
What software is affected by CVE-2017-11338?
CVE-2017-11338 affects Exiv2 version 0.26.
5
Can CVE-2017-11338 be exploited remotely?
Yes, CVE-2017-11338 can be exploited remotely through crafted input.