REDHAT-BUG-1566725: Low severity centos dos2unix vulnerability
Published Apr 12, 2018
·Updated
A flaw was found in Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.
References: https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md
Affected Software
1 affected component
exiv2 exiv2
Event History
Apr 12, 2018
Data Sourced
via Red Hat·09:19 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1566725?
The severity of REDHAT-BUG-1566725 is classified as a critical vulnerability due to the potential for application aborts.
2
How do I fix REDHAT-BUG-1566725?
To fix REDHAT-BUG-1566725, upgrade Exiv2 to the latest patched version provided by the vendor.
3
What does REDHAT-BUG-1566725 affect?
REDHAT-BUG-1566725 specifically affects Exiv2 versions prior to the latest release.
4
What kind of issue is REDHAT-BUG-1566725?
REDHAT-BUG-1566725 is an assertion failure issue in the BigTiffImage::readData function.
5
Can REDHAT-BUG-1566725 be exploited remotely?
Yes, REDHAT-BUG-1566725 can potentially be exploited remotely if the vulnerable Exiv2 application is accessible over the network.