exiv2 (SUSE:Linux Enterprise Server 12 SP4) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server 12 SP4 package exiv2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVE-2017-11591 — CVSS 7.5 (high): There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via…
CVE-2019-20421 — CVSS 7.5 (high): In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU…
CVE-2019-13110 — CVSS 6.5 (medium): A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of…
CVE-2019-13113 — CVSS 6.5 (medium): Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid data location in a CRW…
CVE-2019-17402 — CVSS 6.5 (medium): Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirect…
CVE-2017-9239 — CVSS 6.5 (medium): An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and…
CVE-2018-10958 — CVSS 6.5 (medium): In types.cpp in Exiv2 0.26, a large size value may lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk…
CVE-2018-10998 — CVSS 6.5 (medium): An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by…
CVE-2017-11683 — CVSS 6.5 (medium): There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a…
CVE-2018-17581 — CVSS 6.5 (medium): CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to…
CVE-2017-14859 — CVSS 5.5 (medium): An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a…
CVE-2017-14864 — CVSS 5.5 (medium): An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation…
CVE-2017-17669 — CVSS 5.5 (medium): There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted…
CVE-2017-14862 — CVSS 5.5 (medium): An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a…