Skip to content
OpenAdvisories
Unscored USN-5028-1 1 CVE

exiv2 vulnerability

Published Aug 2, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Exiv2 incorrectly handled certain images.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS exiv2 0.25-3.1ubuntu0.18.04.10
Ubuntu · 20.04 LTS 20.04:LTS exiv2 0.27.2-8ubuntu2.5
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS exiv2 0.25-2.1ubuntu16.04.7+esm3

Vulnerabilities 1

  • Unscored —
    CVE-2021-31291 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. …

    exiv2 exiv2 Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2021-31291