DeutschShown in its original language — a full translation is planned for a future version.
Red Hat Enterprise Linux (exiv2): Mehrere Schwachstellen
view advisory published 2021-11-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in exiv2 ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und die Integrität zu gefährden.
01
describes (12)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-37619US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4… | ||||
| CVE-2021-37618US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4… | ||||
| CVE-2021-31292US | high7.5 | — | ||
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata. | ||||
| CVE-2021-32617US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient algorithm (quadratic complexity) was found… | ||||
| CVE-2021-29623US | low3.3 | — | ||
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versio… | ||||
| CVE-2021-29464US | high7.8 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-29463US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29473US | low2.5 | — | ||
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-29470US | medium6.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29458US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29457US | high7.8 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-3482US | medium6.5 | — | ||
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead t… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2021-11-09external
- Red Hat Security Advisory vom 2021-11-09external
- Amazon Linux Security Advisory ALAS-2023-2215 vom 2023-08-23external
- SUSE Security Update SUSE-SU-2022:3892-1 vom 2022-11-07external
- SUSE Security Update SUSE-SU-2022:4252-1 vom 2022-11-28external
- SUSE Security Update SUSE-SU-2022:4276-1 vom 2022-11-29external
- WID-SEC-W-2022-1968 - CSAF Versionself
- WID-SEC-2022-1968 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan