CVE-2017-18238: Medium severity Exempi Project Exempi vulnerability
An issue was discovered in Exempi before 2.4.4. The TradQTManager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTimeSupport.cpp allows remote attackers to cause a denial of service (infinite loop) via crafted XMP data in a .qt file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/exempito a version that resolves this vulnerability.Fixed in 2.4.4 - Upgrade
Upgrade
debian/exempito a version that resolves this vulnerability.Fixed in 2.5.2-1Fixed in 2.5.2-1+deb11u1Fixed in 2.6.3-1Fixed in 2.6.6-2 - Upgrade
Upgrade
exempito a version that resolves this vulnerability.Fixed in 2.4.4
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18238?
CVE-2017-18238 is classified as a denial of service vulnerability due to the potential for an infinite loop.
How do I fix CVE-2017-18238?
To address CVE-2017-18238, update Exempi to version 2.4.4 or later.
What software is affected by CVE-2017-18238?
CVE-2017-18238 affects Exempi versions prior to 2.4.4.
Can CVE-2017-18238 be exploited remotely?
Yes, CVE-2017-18238 can be exploited remotely through specially crafted XMP data in .qt files.
What impact does CVE-2017-18238 have on systems?
CVE-2017-18238 can cause systems to experience a denial of service, leading to unresponsiveness due to infinite loops.