CVE-2019-17402: Medium severity exiv2 exiv2 vulnerability
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirectory in crwimageint.cpp, because there is no validation of the relationship of the total size to the offset and size.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17402?
CVE-2019-17402 is classified as a high severity vulnerability due to its potential to cause application crashes.
How do I fix CVE-2019-17402?
To fix CVE-2019-17402, upgrade Exiv2 to version 0.27.3 or later for Debian or use the specified patched versions for Ubuntu as indicated in the affected software details.
What versions of Exiv2 are affected by CVE-2019-17402?
Exiv2 version 0.27.2 is the affected version for CVE-2019-17402.
Can CVE-2019-17402 be exploited remotely?
CVE-2019-17402 can be exploited through maliciously crafted images, potentially affecting systems running vulnerable versions.
What is the impact of CVE-2019-17402 on my system?
The impact of CVE-2019-17402 can lead to application crashes resulting in loss of service for applications using Exiv2.