CVE-2018-9306
First published: Wed Apr 04 2018(Updated: )
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-17724. Reason: This candidate is a reservation duplicate of CVE-2017-17724. Notes: All CVE users should reference CVE-2017-17724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CentOS Dos2unix |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/Exiv2/exiv2/issues/263
- https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1566727
- https://access.redhat.com/security/cve/CVE-2017-17724
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1545237
- https://access.redhat.com/security/cve/CVE-2018-9306
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9306
- https://access.redhat.com/errata/RHSA-2020:1577
- https://bugzilla.redhat.com/show_bug.cgi?id=1566737
Frequently Asked Questions
What is the severity of CVE-2018-9306?
CVE-2018-9306 is a duplicate entry and should be considered as referencing the severity of CVE-2017-17724.
How do I fix CVE-2018-9306?
Since CVE-2018-9306 is a duplicate of CVE-2017-17724, any fixes should focus on CVE-2017-17724's mitigation strategies.
Which software is affected by CVE-2018-9306?
CVE-2018-9306 affects Exiv2, specifically its Exiv2 library.
Is CVE-2018-9306 actively exploited?
There is no indication that CVE-2018-9306 is being actively exploited, as it is a duplicate and should be treated as CVE-2017-17724.
Should I take action regarding CVE-2018-9306?
No action specifically for CVE-2018-9306 is necessary; instead, refer to the guidance for CVE-2017-17724.
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-9306
- agent/last-modified-date
- agent/references
- agent/severity
- agent/status
- agent/description
- agent/author
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- status/rejected
- vendor/exiv2
- canonical/centos dos2unix