REDHAT-BUG-1601628: Low severity centos dos2unix vulnerability
Published Jul 16, 2018
·Updated
A flaw was found in Exiv2 0.26. A heap-based buffer over-read in WebPImage::decodeChunks in webpimage.cpp.
References: https://github.com/Exiv2/exiv2/issues/378
Upstream patch: https://github.com/Exiv2/exiv2/commit/505e2417e408abaf8f9fe9e5076f567a65cc59c3
Affected Software
1 affected component
exiv2 exiv2
Event History
Jul 16, 2018
Data Sourced
via Red Hat·11:13 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1601628?
The severity of REDHAT-BUG-1601628 is considered moderate due to the potential for a heap-based buffer over-read.
2
How do I fix REDHAT-BUG-1601628?
To fix REDHAT-BUG-1601628, upgrade to a patched version of Exiv2 that addresses this buffer over-read issue.
3
What software is affected by REDHAT-BUG-1601628?
REDHAT-BUG-1601628 affects Exiv2 version 0.26.
4
What type of vulnerability is REDHAT-BUG-1601628?
REDHAT-BUG-1601628 is a heap-based buffer over-read vulnerability.
5
Is there a CVE associated with REDHAT-BUG-1601628?
Currently, REDHAT-BUG-1601628 does not have a specific CVE identifier reported.