CVE-2019-9143: High severity exiv2 exiv2 vulnerability
An issue was discovered in Exiv2 0.27. There is infinite recursion at Exiv2::Image::printTiffStructure in the file image.cpp. This can be triggered by a crafted file. It allows an attacker to cause Denial of Service (Segmentation fault) or possibly have unspecified other impact.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/exiv2to a version that resolves this vulnerability.Fixed in 0.27
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9143?
CVE-2019-9143 has a severity level that allows for Denial of Service attacks due to infinite recursion leading to segmentation faults.
How do I fix CVE-2019-9143?
To remediate CVE-2019-9143, update Exiv2 to a version higher than 0.27.
What types of attacks can CVE-2019-9143 enable?
CVE-2019-9143 can be exploited to launch Denial of Service attacks by causing an application crash.
What software versions are affected by CVE-2019-9143?
CVE-2019-9143 affects Exiv2 version 0.27.
Is CVE-2019-9143 specific to any operating systems?
CVE-2019-9143 is relevant to any system that runs Exiv2 version 0.27, regardless of the operating system.