REDHAT-BUG-1566735: Low severity centos dos2unix vulnerability

Published Apr 12, 2018

Updated

In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.cpp could result in a crash or information leak, due to use of the untrusted len value without any check.

References: https://github.com/Exiv2/exiv2/issues/263 https://github.com/xiaoqx/pocs/blob/master/exiv2/readme.md

Affected Software

1 affected component

exiv2 exiv2

Event History

Apr 12, 2018

Data Sourced

via Red Hat·09:35 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1566735?

REDHAT-BUG-1566735 is categorized as a medium severity vulnerability due to the potential for crashes or information leaks.

How do I fix REDHAT-BUG-1566735?

To fix REDHAT-BUG-1566735, it is recommended to update Exiv2 to a secure version where the out-of-bounds read issue has been addressed.

Which software is affected by REDHAT-BUG-1566735?

REDHAT-BUG-1566735 affects Exiv2 version 0.26.

What is the nature of the issue in REDHAT-BUG-1566735?

The issue in REDHAT-BUG-1566735 is an out-of-bounds read vulnerability that arises from untrusted value usage in the code.

Can REDHAT-BUG-1566735 lead to data exposure?

Yes, REDHAT-BUG-1566735 can lead to information leaks, posing a risk of data exposure.