CVE-2018-20097

Published: Dec 12, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

Affected (7)

Products: Exiv2: Exiv2 · Debian: Debian Linux · Fedoraproject: Fedora · +1 more

Show all products

Exiv2: Exiv2 · Debian: Debian Linux · Fedoraproject: Fedora · Redhat: Enterprise Linux Dekstop, Enterprise Linux Server, Enterprise Linux Workstation

1 product

1 product

1 product

3 products

Enterprise Linux Dekstop

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Exiv2 Exiv2	Version 0.27 rc3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 30

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Dekstop	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

https://access.redhat.com/errata/RHSA-2019:2101

Source: cve@mitre.org

Third Party Advisory

https://github.com/Exiv2/exiv2/issues/590

Source: cve@mitre.org

ExploitIssue TrackingPatchThird Party Advisory

https://github.com/TeamSeri0us/pocs/tree/master/exiv2/20181206

Source: cve@mitre.org

ExploitThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCEKTYF7HLM6VH2WCWO2HXTJH37MBLA/

Source: cve@mitre.org

https://access.redhat.com/errata/RHSA-2019:2101