CVE-2018-9303: Medium severity exiv2 exiv2 vulnerability
Published Apr 4, 2018
·Updated
A flaw was found in Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
References: https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md
Affected Software
1 affected component
exiv2 exiv2<0.26
Event History
Apr 4, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:29 PM
DescriptionSeverityWeaknessAffected Software
Apr 12, 2018
Data Sourced
via Red Hat·09:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-9303?
CVE-2018-9303 has a medium severity rating due to its potential to cause application aborts.
2
How do I fix CVE-2018-9303?
To fix CVE-2018-9303, upgrade to a version of Exiv2 that is higher than 0.26.
3
What software is affected by CVE-2018-9303?
CVE-2018-9303 affects Exiv2 versions up to 0.26.
4
What type of vulnerability is CVE-2018-9303?
CVE-2018-9303 is an assertion failure vulnerability within the BigTiffImage::readData function.
5
What impact does CVE-2018-9303 have on users?
CVE-2018-9303 may result in application crashes leading to unavailability of the Exiv2 library for users.