Skip to content
OpenAdvisories
Medium · 4.7 CVE-2021-37615 EUVD-2021-24173

Null pointer dereference in Exiv2::Internal::resolveLens0x319

Published Aug 9, 2021 · Updated Aug 4, 2024 · Assigned by GitHub_M

Description

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A null pointer dereference was found in Exiv2 versions v0.27.4 and earlier. The null pointer dereference is triggered when Exiv2 is used to print the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when printing the interpreted (translated) data, which is a less frequently used Exiv2 operation that requires an extra command line option (`-p t` or `-P t`). The bug is fixed in version v0.27.5.

Affected products

VendorProductAffectedFixed
Exiv2 exiv2 <= 0.27.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 exiv2 0.27.5-1 —
Debian 13 exiv2 0.27.5-1 —
Debian 12 exiv2 0.27.5-1 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS exiv2 0.27.3-3ubuntu4 —
Ubuntu 20.04 LTS exiv2 0.27.2-8ubuntu2.6 USN-5043-1
Ubuntu 18.04 LTS exiv2 0.25-3.1ubuntu0.18.04.11 USN-5043-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS exiv2 0.25-2.1ubuntu16.04.7+esm4 USN-5043-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed exiv2 0.27.5-8.1 openSUSE-SU-2024:12548-1
ReleasePackageFixed inAdvisory
Alpine v3.24 exiv2 0.27.5-r0 —
Alpine v3.23 exiv2 0.27.5-r0 —
Alpine v3.22 exiv2 0.27.5-r0 —
Alpine v3.21 exiv2 0.27.5-r0 —
Alpine v3.20 exiv2 0.27.5-r0 —
Show 6 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 exiv2 0.27.5-r0 —
Alpine v3.18 exiv2 0.27.5-r0 —
Alpine v3.17 exiv2 0.27.5-r0 —
Alpine v3.16 exiv2 0.27.5-r0 —
Alpine v3.15 exiv2 0.27.5-r0 —
Alpine v3.14 exiv2 0.27.5-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) exiv2 0.27.5-1 —

Advisories 2

References