CVE-2017-14866: Buffer Overflow
Published Sep 28, 2017
·Updated
There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack.
Affected Software
1 affected component
exiv2 exiv2=0.26
Event History
Sep 28, 2017
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-14866?
CVE-2017-14866 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2017-14866?
To fix CVE-2017-14866, update Exiv2 to version 0.27 or later.
3
What kind of attack can CVE-2017-14866 lead to?
CVE-2017-14866 can lead to a denial of service attack due to a heap-based buffer overflow.
4
Which version of Exiv2 is affected by CVE-2017-14866?
CVE-2017-14866 affects Exiv2 version 0.26.
5
Is CVE-2017-14866 present in newer versions of Exiv2?
No, CVE-2017-14866 is not present in Exiv2 versions after 0.26.