CVE-2018-9305
04.04.2018, 21:29
In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak, related to the "== 0x1c" case.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| exiv2 | exiv2 | 𝑥 < 0.26 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libexiv2-26 |
| ||||||||||||||||||||||||||||||||||||||||||
| libexiv2-27 |
| ||||||||||||||||||||||||||||||||||||||||||
| libexiv2-devel |
| ||||||||||||||||||||||||||||||||||||||||||
| libexiv2-xmp-static |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||||
|---|---|---|---|---|---|
| exiv2 |
| ||||
| exiv2-devel |
| ||||
| exiv2-doc |
| ||||
| exiv2-libs |
| ||||
| gegl |
| ||||
| gnome-color-manager |
| ||||
| libgexiv2 |
| ||||
| libgexiv2-devel |
|
Amazon Linux Releases
Common Weakness Enumeration
References