Read the docs
Red Hat Security Advisory

RHSA-2021:4173

exiv2 security, bug fix, and enhancement update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 12 records

Priority LOW 38

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.02152 Published 2021-04-19 Partial fix · 0.27.4 CWE-122
Priority LOW 37

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01499 Published 2021-04-30 Partial fix · 0.27.4 CWE-122
TI-2021-02444 CVE-2021-3482 · GHSA-73rc-8qcm-v2wx

Improper input validation in exiv2

Priority LOW 33

A flaw was found in Exiv2 in versions before and including 0.27.4-RC1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.02295 Published 2021-04-08 Partial fix CWE-20
Priority LOW 32

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01571 Published 2021-04-23 Partial fix CWE-125
Priority LOW 28

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01568 Published 2021-04-19 Partial fix · 0.27.4 CWE-125
Priority LOW 27

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00984 Published 2021-08-09 Partial fix CWE-125
Priority LOW 27

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00984 Published 2021-08-09 Partial fix CWE-125
Priority LOW 27

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01174 Published 2021-05-17 Partial fix CWE-400
Priority LOW 27

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01119 Published 2021-04-30 Partial fix · 0.27.4 CWE-125
Priority LOW 19

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.01104 Published 2021-05-13 Partial fix · v0.27.4 CWE-908
Priority LOW 16

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.

CVSS 3.1LOW 2.5 Local No auth User interaction EPSS 0.01677 Published 2021-04-26 Partial fix · 0.27.4 CWE-125