Red Hat Security AdvisoryRHSA-2022:1842
exiv2 security, bug fix, and enhancement update
Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) exiv2-0.27.5-2.el8, exiv2-libs-0.27.5-2.el8
- Red Hat Enterprise Linux CRB (v. 8) exiv2-devel-0.27.5-2.el8, exiv2-doc-0.27.5-2.el8
Fixes 1 record
Priority LOW 32
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01432 · Published 2021-08-19 · Partial fix CWE-674
