CVE-2020-18898: Medium severity exiv2 exiv2 vulnerability
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/exiv2to a version that resolves this vulnerability.Fixed in 0.27.5
Event History
Frequently Asked Questions
What is the severity of CVE-2020-18898?
CVE-2020-18898 has a medium severity due to its potential to cause denial of service through stack exhaustion.
How do I fix CVE-2020-18898?
To resolve CVE-2020-18898, upgrade Exiv2 to version 0.27.1 or above, where the vulnerability has been addressed.
Which versions of Exiv2 are affected by CVE-2020-18898?
Exiv2 version 0.27 is affected by CVE-2020-18898.
What type of attack is associated with CVE-2020-18898?
CVE-2020-18898 is associated with a denial of service attack that can be triggered by maliciously crafted files.
What is the key function involved in CVE-2020-18898?
The printIFDStructure function in Exiv2 is the key function involved in the stack exhaustion issue described in CVE-2020-18898.