First published: Fri Aug 18 2017(Updated: )
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote denial of service.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
CentOS Dos2unix | =0.26 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-12956 has a high severity rating due to its potential to cause remote denial of service.
CVE-2017-12956 allows for illegal address access in Exiv2 version 0.26, which can lead to a crash or denial of service.
To fix CVE-2017-12956, promptly update to a patched version of Exiv2 that addresses this vulnerability.
CVE-2017-12956 specifically affects Exiv2 version 0.26 of the libexiv2 library.
Yes, CVE-2017-12956 can be exploited remotely, making it a critical vulnerability for systems running the affected software.