Summary
It was discovered that Exiv2 incorrectly handled certain PSD files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-19107, CVE-2018-19108)
It was discovered that Exiv2 incorrectly handled certain PNG files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-19535, CVE-2019-13112)
It was discovered that Exiv2 incorrectly handled certain CRW files.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-13110, CVE-2019-13113)
It was discovered that incorrectly handled certain HTTP requests.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2019-13114)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | exiv2 | 0.25-2.1ubuntu16.04.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | exiv2 | 0.25-3.1ubuntu0.18.04.3 |
Vulnerabilities 7
-
Medium 6.5
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer…
-
Unscored —
In Exiv2 0.26, Exiv2::IptcParser::decode in iptc.cpp (called from psdimage.cpp in the PSD image reader) may suffer from…
-
Unscored —
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of servic…
-
Unscored —
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (applic…
-
Unscored —
A CiffDirectory::readDirectory integer overflow and out-of-bounds read in Exiv2 through 0.27.1 allows an attacker to ca…
-
Unscored —
A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a deni…
-
Unscored —
Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to assertion failure) via an invalid da…
References
-
report
https://ubuntu.com/security/CVE-2018-19107
-
report
https://ubuntu.com/security/CVE-2018-19108
-
report
https://ubuntu.com/security/CVE-2018-19535
-
report
https://ubuntu.com/security/CVE-2019-13110
-
report
https://ubuntu.com/security/CVE-2019-13112
-
report
https://ubuntu.com/security/CVE-2019-13113
-
report
https://ubuntu.com/security/CVE-2019-13114