Lucene search
PRIOn knowledge basePRION:CVE-2018-12265HistoryJun 13, 2018 - 11:29 a.m.
Integer overflow
2018-06-1311:29:00
PRIOn knowledge base
www.prio-n.com
6
Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 17.10 | |
| ubuntu_linux | eq | 18.04 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 | |
| exiv2 | eq | 0.26 |
References
lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
access.redhat.com/errata/RHSA-2019:2101
github.com/Exiv2/exiv2/issues/365
github.com/TeamSeri0us/pocs/blob/master/exiv2/1-out-of-read-Poc
lists.debian.org/debian-lts-announce/2018/06/msg00010.html
security.gentoo.org/glsa/201811-14
usn.ubuntu.com/3700-1/
www.debian.org/security/2018/dsa-4238
Related
debiancve
debiancve
CVE-2018-12265
2018-06-13 11:29:00
veracode
veracode
Denial Of Service (DoS) Through Out-of-Bounds Read
2018-06-14 03:13:05
cve
cve
CVE-2018-12265
2018-06-13 11:29:00
redhatcve
redhatcve
CVE-2018-12265
2018-06-13 21:27:37
osv
osv
CVE-2018-12265
2018-06-13 11:29:00
exiv2 - security update
2018-06-28 00:00:00
exiv2 - security update
2018-07-03 00:00:00
nvd
nvd
CVE-2018-12265
2018-06-13 11:29:00
cvelist
cvelist
CVE-2018-12265
2018-06-13 11:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2018-1286)
2020-01-23 00:00:00
openSUSE: Security Advisory for exiv2 (openSUSE-SU-2018:3306-1)
2018-10-26 00:00:00
Huawei EulerOS: Security Advisory for exiv2 (EulerOS-SA-2018-1287)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2018-1287)
2018-09-27 00:00:00
openSUSE Security Update : exiv2 (openSUSE-2018-1224)
2018-10-24 00:00:00
openSUSE Security Update : exiv2 (openSUSE-2019-816)
2019-03-27 00:00:00
ubuntucve
ubuntucve
CVE-2018-12265
2018-06-13 00:00:00
suse
suse
Security update for exiv2 (moderate)
2018-10-23 15:08:18
Security update for exiv2 (moderate)
2020-04-09 00:00:00
ubuntu
ubuntu
Exiv2 vulnerabilities
2018-07-03 00:00:00
debian
debian
[SECURITY] [DSA 4238-1] exiv2 security update
2018-07-03 21:02:42
[SECURITY] [DLA 1402-1] exiv2 security update
2018-06-28 05:16:27
fedora
fedora
[SECURITY] Fedora 28 Update: exiv2-0.26-12.fc28
2018-08-07 01:20:04
[SECURITY] Fedora 27 Update: exiv2-0.26-12.fc27
2018-08-09 16:53:01
gentoo
gentoo
Exiv2: Multiple vulnerabilities
2018-11-24 00:00:00
oraclelinux
oraclelinux
exiv2 security, bug fix, and enhancement update
2019-08-13 00:00:00
amazon
amazon
Low: exiv2
2019-10-21 18:01:00
centos
centos
exiv2 security update
2019-09-18 20:54:21
redhat
redhat
(RHSA-2019:2101) Low: exiv2 security, bug fix, and enhancement update
2019-08-06 08:00:57