REDHAT-BUG-1545237: Low severity centos dos2unix vulnerability

Published Feb 14, 2018

Updated

A flaw was found in Exiv2 0.26. There is a integer underflow, leading to a heap-based buffer over-read, in the Exiv2::IptcData::printStructure function in iptc.cpp. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file or, possibly, disclose memory data.

References: https://bugzilla.redhat.com/showbug.cgi?id=1524107 https://github.com/Exiv2/exiv2/issues/210

Affected Software

1 affected component

exiv2 exiv2

Event History

Feb 14, 2018

Data Sourced

via Red Hat·01:03 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1545237?

The severity of REDHAT-BUG-1545237 is considered high due to its potential to cause denial of service and possible memory data disclosure.

How do I fix REDHAT-BUG-1545237?

To fix REDHAT-BUG-1545237, it's recommended to update Exiv2 to the latest version where this vulnerability has been addressed.

Who is affected by REDHAT-BUG-1545237?

REDHAT-BUG-1545237 affects users of Exiv2 version 0.26 and potentially vulnerable applications relying on this library.

What type of attacks can exploit REDHAT-BUG-1545237?

Attackers can exploit REDHAT-BUG-1545237 by crafting malicious TIFF files leading to a denial of service or memory data exposure.

What component of Exiv2 is vulnerable in REDHAT-BUG-1545237?

The vulnerable component in REDHAT-BUG-1545237 is the Exiv2::IptcData::printStructure function in iptc.cpp.