exiv2 (SUSE:Manager Proxy 4.1) — known CVEs & security advisories
Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy 4.1 package exiv2, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.
CVE-2017-11591 — CVSS 7.5 (high): There is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead to a remote denial of service attack via…
CVE-2021-31292 — CVSS 7.5 (high): An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of…
CVE-2018-18915 — CVSS 6.5 (medium): There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a…
CVE-2018-20097 — CVSS 6.5 (medium): There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead…
CVE-2018-20098 — CVSS 6.5 (medium): There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to…
CVE-2018-20099 — CVSS 6.5 (medium): There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote…
CVE-2018-8976 — CVSS 6.5 (medium): In Exiv2 0.26, jpgimage.cpp allows remote attackers to cause a denial of service (image.cpp Exiv2::Internal::stringFormat out-of-bounds…
CVE-2018-8977 — CVSS 6.5 (medium): In Exiv2 0.26, the Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp allows remote attackers to cause a denial of service…
CVE-2019-13109 — CVSS 6.5 (medium): An integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (SIGSEGV) via a crafted PNG image file, because…
CVE-2019-13110 — CVSS 6.5 (medium): A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to cause a denial of…
CVE-2020-18898 — CVSS 6.5 (medium): A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a…
CVE-2020-18899 — CVSS 6.5 (medium): An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of…
CVE-2019-17402 — CVSS 6.5 (medium): Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::CiffDirectory::readDirect…
CVE-2018-10772 — CVSS 6.5 (medium): The tEXtToDataBuf function in pngimage.cpp in Exiv2 through 0.26 allows remote attackers to cause a denial of service (application crash)…
CVE-2018-17581 — CVSS 6.5 (medium): CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to…
CVE-2021-37621 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop…
CVE-2018-5772 — CVSS 5.5 (medium): In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the…
CVE-2021-32815 — CVSS 5.5 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion…
CVE-2021-37620 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
CVE-2021-32617 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient…
CVE-2021-29470 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
CVE-2021-37618 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
CVE-2021-37619 — CVSS 4.7 (medium): Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds…
CVE-2021-29473 — CVSS 2.5 (low): Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An…
CVE-2021-31291: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457…