Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:8030
HistoryDec 13, 2018 - 9:47 a.m.

Denial Of Service (DoS)

2018-12-1309:47:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.004

Percentile

73.7%

libexiv2.so is vulnerable to denial of service. An attacker is able to crash the process by entering a malicious input to the function Exiv2::Jp2Image::encodeJp2Header in jp2image.cpp which results in a heap-based buffer over-read.