First published: Tue Jul 13 2021(Updated: )
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Exiv2 Exiv2 | =0.27.1 | |
Debian Debian Linux | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The CVE ID of this vulnerability is CVE-2020-19716.
The severity of CVE-2020-19716 is rated as medium with a CVSS score of 6.5.
CVE-2020-19716 affects Exiv2 version 0.27.1 and Debian Linux version 10.0.
CVE-2020-19716 can be exploited by triggering a buffer overflow in the Databuf function in types.cpp of Exiv2 v0.27.1, leading to a denial of service (DOS).
You can find more information about CVE-2020-19716 on the Exiv2 GitHub page and the Debian LTS announce mailing list.