An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call.
References
| Link | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2019:2101 | Third Party Advisory |
| https://github.com/Exiv2/exiv2/issues/303 | Exploit Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html | Mailing List Third Party Advisory |
| https://security.gentoo.org/glsa/201811-14 | Third Party Advisory |
| https://usn.ubuntu.com/3700-1/ | Third Party Advisory |
| https://www.debian.org/security/2018/dsa-4238 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
01 Mar 2023, 17:13
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Redhat enterprise Linux Workstation
Redhat enterprise Linux Desktop Redhat Redhat enterprise Linux Server |
|
| References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:2101 - Third Party Advisory | |
| CPE | cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* |
Information
Published : 2018-05-12 04:29
Updated : 2023-12-10 12:30
NVD link : CVE-2018-10998
Mitre link : CVE-2018-10998
CVE.ORG link : CVE-2018-10998
JSON object : View
Products Affected
redhat
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_workstation
exiv2
- exiv2
debian
- debian_linux
canonical
- ubuntu_linux
CWE