Known vulnerabilities in exiv2 (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:exiv2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting exiv2 (Red Hat package) exiv2 (Red Hat package) is affected by 15 known vulnerabilities: 3 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU106252 - Uncontrolled Recursion
CVE-2020-18898
CWE-674 Medium
No
No
0.27.5-2.el8 29.03.2025 SB2021082039
SB20220615151
SB20220615152
and 2 more
#VU84717 - Out-of-bounds read
CVE-2021-37619
CWE-125 Medium
No
No
0.27.4-5.el8 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 6 more
#VU84716 - Out-of-bounds read
CVE-2021-37618
CWE-125 Medium
No
No
0.27.4-5.el8 22.12.2023 SB2021092125
SB2023122237
SB2021120730
and 7 more
#VU84712 - Out-of-bounds read
CVE-2021-29470
CWE-125 Medium
No
No
0.27.4-5.el8 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 8 more
#VU84711 - Out-of-bounds write
CVE-2021-29464
CWE-787 High
No
No
0.27.4-5.el8 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 6 more
#VU84710 - Out-of-bounds read
CVE-2021-29463
CWE-125 Medium
No
No
0.27.4-5.el8 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 7 more
#VU84709 - Out-of-bounds read
CVE-2021-29458
CWE-125 Medium
No
No
0.27.4-5.el8 22.12.2023 SB2022060401
SB2023122237
SB2021051505
and 6 more
#VU67973 - Resource exhaustion
CVE-2021-32617
CWE-400 Medium
No
No
0.27.4-5.el8 06.10.2022 SB2021051706
SB2022100648
SB2023122237
and 9 more
#VU55973 -
CVE-2021-31291
High
No
No
0.26-11.el8_1, 0.27.0-4.el7_8, 0.27.2-6.el8_2, 0.27.3-3.el8_4 18.08.2021 SB2021051706
SB2021081822
SB2021081823
and 17 more
#VU55922 -
CVE-2021-31292
Low
No
No
0.27.4-5.el8 17.08.2021 SB2021051706
SB2021081715
SB2023122237
and 7 more
#VU55921 -
CVE-2021-29473
Low
No
No
0.27.4-5.el8 17.08.2021 SB2021051706
SB2021081715
SB2022112854
and 12 more
#VU55920 -
CVE-2021-29457
Medium
No
No
0.27.4-5.el8 17.08.2021 SB2021051706
SB2021081715
SB2022112854
and 9 more
#VU55919 -
CVE-2021-3482
High
No
No
0.27.4-5.el8 17.08.2021 SB2021051706
SB2021081715
SB2021051505
and 6 more
#VU53298 - Exposure of sensitive information to an unauthorized actor
CVE-2021-29623
CWE-200 Low
No
No
0.27.4-5.el8 17.05.2021 SB2021051706
SB2023122237
SB2021060740
and 8 more
#VU28797 - Memory corruption
CVE-2019-17402
CWE-119 Medium
No
No
0.27.0-3.el7_8, 0.27.3-2.el8 08.06.2020 SB2019100936
SB2019120533
SB2020093015
and 4 more