Summary
[0.27.0-3]
- Validate relationship of the total size to the offset to avoid crash
Resolves: bz#1775695
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | exiv2 | 0:0.27.0-3.el7_8 |
| Oracle Linux · 7 | exiv2-devel | 0:0.27.0-3.el7_8 |
| Oracle Linux · 7 | exiv2-doc | 0:0.27.0-3.el7_8 |
| Oracle Linux · 7 | exiv2-libs | 0:0.27.0-3.el7_8 |
Vulnerabilities 1
-
Unscored —
Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::Ciff…