REDHAT-BUG-1632481: Buffer Overflow
Published Sep 24, 2018
·Updated
A flaw was found in Exiv2::d2Data in types.cpp in Exiv2 v0.26 allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted image file.
References: https://github.com/Exiv2/exiv2/issues/453
Affected Software
1 affected component
exiv2 exiv2
Event History
Sep 24, 2018
Data Sourced
via Red Hat·09:23 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-1632481?
The severity of REDHAT-BUG-1632481 is high due to the potential for a denial of service caused by a heap-based buffer overflow.
2
How do I fix REDHAT-BUG-1632481?
To fix REDHAT-BUG-1632481, update Exiv2 to the latest version where this vulnerability has been patched.
3
What kind of attack does REDHAT-BUG-1632481 enable?
REDHAT-BUG-1632481 enables remote attackers to perform denial of service attacks through crafted image files.
4
Which version of Exiv2 is affected by REDHAT-BUG-1632481?
Exiv2 version 0.26 is affected by the vulnerability noted in REDHAT-BUG-1632481.
5
What component of Exiv2 is vulnerable in REDHAT-BUG-1632481?
The vulnerable component in REDHAT-BUG-1632481 is Exiv2::d2Data in types.cpp.