PYSEC-2021-879

vendorUSosv

view advisory published 2021-08-19Licence: CC-BY-4.0

An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-18899US	medium6.5	1.66% (77th)	—	2021-08-19
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.

references

External citations — patches, advisories, analysis.

https://cwe.mitre.org/data/definitions/789.htmlWEB
https://github.com/Exiv2/exiv2/issues/742REPORT
https://security.gentoo.org/glsa/202312-06ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan