Unscored USN-4159-1 1 CVE

exiv2 vulnerability

Published Oct 21, 2019 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exiv2 incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	exiv2	0.25-2.1ubuntu16.04.5
Ubuntu · 18.04 LTS 18.04:LTS	exiv2	0.25-3.1ubuntu0.18.04.4

Vulnerabilities 1

Unscored —

CVE-2019-17402

Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from Exiv2::Internal::Ciff…

exiv2 exiv2 exiv2 Debian Ubuntu Alpine

Oct 9, 2019

References

report
https://ubuntu.com/security/CVE-2019-17402