Lucene search
Veracode Vulnerability DatabaseVERACODE:30364HistoryMay 06, 2021 - 11:15 a.m.
Out-of-bounds Read
2021-05-0611:15:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.001
Percentile
44.7%
Exiv2 is vulnerable to out-of-bounds read. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file.
References
github.com/Exiv2/exiv2/issues/1530
github.com/Exiv2/exiv2/pull/1536
github.com/Exiv2/exiv2/security/advisories/GHSA-57jj-75fm-9rq5
lists.fedoraproject.org/archives/list/[email protected]/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/
lists.fedoraproject.org/archives/list/[email protected]/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/
secdb.alpinelinux.org/edge/community.yaml
secdb.alpinelinux.org/v3.13/community.yaml
Related
prion
prion
Out-of-bounds
2021-04-19 19:15:00
cve
cve
CVE-2021-29458
2021-04-19 19:15:18
ubuntucve
ubuntucve
CVE-2021-29458
2021-04-19 00:00:00
CVE-2021-31292
2021-07-26 00:00:00
alpinelinux
alpinelinux
CVE-2021-29458
2021-04-19 19:15:18
nvd
nvd
CVE-2021-29458
2021-04-19 19:15:18
osv
osv
CVE-2021-29458
2021-04-19 19:15:18
exiv2 vulnerabilities
2021-05-10 18:07:19
Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
cbl_mariner
cbl_mariner
CVE-2021-29458 affecting package exiv2 for versions less than 0.27.5-1
2022-06-25 20:53:09
redhatcve
redhatcve
CVE-2021-29458
2021-04-22 16:44:01
debiancve
debiancve
CVE-2021-29458
2021-04-19 19:15:18
cvelist
cvelist
CVE-2021-29458 Out-of-bounds read in Exiv2::Internal::CrwMap::encode
2021-04-19 00:00:00
ubuntu
ubuntu
Exiv2 vulnerabilities
2021-05-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4941-1)
2021-05-11 00:00:00
Fedora: Security Advisory for exiv2 (FEDORA-2021-10d7331a31)
2021-05-05 00:00:00
Fedora: Security Advisory for exiv2 (FEDORA-2021-be94728b95)
2021-05-15 00:00:00
nessus
nessus
EulerOS 2.0 SP3 : exiv2 (EulerOS-SA-2021-2579)
2021-10-25 00:00:00
EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2021-2327)
2021-09-07 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: exiv2-0.27.3-6.fc33
2021-05-14 21:12:27
[SECURITY] Fedora 34 Update: exiv2-0.27.3-6.fc34
2021-05-04 01:01:31
mageia
mageia
Updated exiv2 packages fix security vulnerabilities
2021-06-08 19:46:03
freebsd
freebsd
Exiv2 -- Multiple vulnerabilities
2021-04-25 00:00:00
archlinux
archlinux
[ASA-202106-54] exiv2: multiple issues
2021-06-22 00:00:00
redhat
redhat
(RHSA-2021:4173) Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
almalinux
almalinux
Moderate: exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
rocky
rocky
exiv2 security, bug fix, and enhancement update
2021-11-09 08:31:22
gentoo
gentoo
Exiv2: Multiple Vulnerabilities
2023-12-22 00:00:00
debian
debian
[SECURITY] [DLA 3265-1] exiv2 security update
2023-01-10 17:02:40