REDHAT-BUG-1609396: Buffer Overflow

Published Jul 27, 2018

Updated

A flaw was found in Exiv2 0.26. The samples/geotag.cpp in the example code misuses the realpath function on POSIX platforms (other than Apple platforms) where glibc is not used, possibly leading to a buffer overflow.

References: https://github.com/Exiv2/exiv2/issues/382

Affected Software

1 affected component

exiv2 exiv2

Event History

Jul 27, 2018

Data Sourced

via Red Hat·09:40 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1609396?

The severity of REDHAT-BUG-1609396 is classified as high due to the potential for buffer overflow vulnerabilities.

How do I fix REDHAT-BUG-1609396?

To fix REDHAT-BUG-1609396, ensure you update to the latest version of Exiv2 that addresses this vulnerability.

What systems are affected by REDHAT-BUG-1609396?

REDHAT-BUG-1609396 affects Exiv2 versions prior to the patched updates on POSIX platforms excluding Apple platforms.

Is REDHAT-BUG-1609396 exploitable?

Yes, if unpatched, REDHAT-BUG-1609396 can be exploited by attackers to cause a buffer overflow.

What is the cause of REDHAT-BUG-1609396?

The cause of REDHAT-BUG-1609396 is a misuse of the realpath function in the samples/geotag.cpp file in Exiv2.