CiffDirectory::readDirectory() at crwimage_int.cpp in Exiv2 0.26 has excessive stack consumption due to a recursive function, leading to Denial of service.
References
Link | Resource |
---|---|
https://access.redhat.com/errata/RHSA-2019:2101 | Third Party Advisory |
https://github.com/Exiv2/exiv2/issues/460 | Exploit Patch Third Party Advisory |
https://github.com/SegfaultMasters/covering360/blob/master/Exiv2 | Exploit Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html | Mailing List Third Party Advisory |
https://usn.ubuntu.com/3852-1/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
13 Jan 2023, 16:34
Type | Values Removed | Values Added |
---|---|---|
References | (MLIST) https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html - Mailing List, Third Party Advisory | |
References | (REDHAT) https://access.redhat.com/errata/RHSA-2019:2101 - Third Party Advisory | |
References | (MLIST) https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html - Mailing List, Third Party Advisory | |
CPE | cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
|
First Time |
Redhat enterprise Linux Workstation
Redhat enterprise Linux Desktop Redhat Redhat enterprise Linux Server |
10 Jan 2023, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2018-09-28 09:29
Updated : 2023-12-10 12:44
NVD link : CVE-2018-17581
Mitre link : CVE-2018-17581
CVE.ORG link : CVE-2018-17581
JSON object : View
Products Affected
canonical
- ubuntu_linux
redhat
- enterprise_linux_workstation
- enterprise_linux_desktop
- enterprise_linux_server
exiv2
- exiv2
debian
- debian_linux
CWE
CWE-400
Uncontrolled Resource Consumption