REDHAT-BUG-1635045: Low severity centos dos2unix vulnerability
A flaw was found in Exiv2 0.26. The CiffDirectory::readDirectory() function at crwimageint.cpp has an excessive stack consumption due to a recursive function, leading to Denial of service.
References: https://github.com/Exiv2/exiv2/issues/460 https://github.com/SegfaultMasters/covering360/blob/master/Exiv2
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1635045?
The severity of REDHAT-BUG-1635045 is classified as a Denial of Service due to excessive stack consumption.
How do I fix REDHAT-BUG-1635045?
To fix REDHAT-BUG-1635045, update Exiv2 to a version that addresses the stack consumption vulnerability.
What versions of Exiv2 are affected by REDHAT-BUG-1635045?
Exiv2 version 0.26 is affected by the vulnerability described in REDHAT-BUG-1635045.
What type of vulnerability is REDHAT-BUG-1635045?
REDHAT-BUG-1635045 is a Denial of Service vulnerability caused by excessive stack consumption in a recursive function.
What should I do if I am using an affected version of Exiv2 related to REDHAT-BUG-1635045?
If using an affected version of Exiv2, it is recommended to upgrade to a patched version to mitigate the vulnerability.