CVE-2019-13112
30.06.2019, 23:15
A PngChunk::parseChunkContent uncontrolled memory allocation in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (crash due to an std::bad_alloc exception) via a crafted PNG image file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| exiv2 | exiv2 | 𝑥 ≤ 0.27.1 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 18.04 |
| canonical | ubuntu_linux | 18.10 |
| canonical | ubuntu_linux | 19.04 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| exiv2 |
| ||
| exiv2-devel |
| ||
| exiv2-doc |
| ||
| exiv2-libs |
| ||
| gegl |
| ||
| gnome-color-manager |
| ||
| libgexiv2 |
| ||
| libgexiv2-devel |
|
References