SB2021083144 - Multiple vulnerabilities in GNU Exiv2

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Division by zero (CVE-ID: CVE-2020-18774)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a divide by zero error within the printLong() function in tags_int.cpp. A remote attacker can pass a specially crafted file to the application and perform a denial of service (DoS) attack.

2) Buffer overflow (CVE-ID: CVE-2020-18773)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the decode() function in iptc.cpp. A remote attacker can pass specially crafted file to the application and perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://github.com/Exiv2/exiv2/issues/759
• https://github.com/Exiv2/exiv2/issues/760