Red Hat Security AdvisoryRHSA-2021:4173
exiv2 security, bug fix, and enhancement update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixes 12 records
Priority LOW 38
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02555 · Published 2021-07-26 · Partial fix CWE-190
Priority LOW 38
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02152 · Published 2021-04-19 · Partial fix · 0.27.4 CWE-122
Priority LOW 37
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01499 · Published 2021-04-30 · Partial fix · 0.27.4 CWE-122
Priority LOW 33
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.02295 · Published 2021-04-08 · Partial fix CWE-20
Priority LOW 32
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01571 · Published 2021-04-23 · Partial fix CWE-125
Priority LOW 28
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01568 · Published 2021-04-19 · Partial fix · 0.27.4 CWE-125
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00984 · Published 2021-08-09 · Partial fix CWE-125
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00984 · Published 2021-08-09 · Partial fix CWE-125
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01174 · Published 2021-05-17 · Partial fix CWE-400
Priority LOW 27
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01119 · Published 2021-04-30 · Partial fix · 0.27.4 CWE-125
Priority LOW 19
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
CVSS 3.1LOW 3.6· Local · No auth · User interaction · EPSS 0.01104 · Published 2021-05-13 · Partial fix · v0.27.4 CWE-908
Priority LOW 16
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.
CVSS 3.1LOW 2.5· Local · No auth · User interaction · EPSS 0.01677 · Published 2021-04-26 · Partial fix · 0.27.4 CWE-125