CVE-2018-20099: Medium severity centos dos2unix vulnerability
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a denial of service attack.
Upstream issue:
https://github.com/Exiv2/exiv2/issues/590
References:
https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206
Other sources
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-20099?
CVE-2018-20099 has a severity rating that indicates it can be exploited to cause a remote denial of service.
How do I fix CVE-2018-20099?
To fix CVE-2018-20099, you should upgrade Exiv2 to a version beyond 0.27-RC3 that addresses this vulnerability.
What is the impact of CVE-2018-20099?
The impact of CVE-2018-20099 is an infinite loop that can lead to a denial of service condition in applications using Exiv2 0.27-RC3.
Is CVE-2018-20099 specific to certain versions of Exiv2?
Yes, CVE-2018-20099 specifically affects Exiv2 version 0.27-RC3.
Can CVE-2018-20099 be exploited remotely?
Yes, CVE-2018-20099 can be exploited remotely through crafted input to achieve a denial of service.