Buffer overflow in Exiv2 - CVE-2018-20097

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU36299

Buffer overflow in Exiv2 - CVE-2018-20097

Published: December 12, 2018 / Updated: October 27, 2022


Vulnerability identifier: #VU36299
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-20097
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.

There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.


Affected software

Exiv2
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Desktop Applications
openSUSE Leap
Fedora
exiv2-debugsource
libexiv2-12
libexiv2-12-debuginfo
libexiv2-devel
exiv2-debuginfo
libexiv2-26-32bit-debuginfo
libexiv2-26-32bit
exiv2-lang
libexiv2-doc
libexiv2-26-debuginfo
libexiv2-26
exiv2
mingw-exiv2

How to mitigate CVE-2018-20097

Install update from vendor's website.

Exiv2 - update to 0.27
exiv2-debugsource - addressed in versions 0.23-12.18.1, 0.26-150000.6.26.1
libexiv2-12 - update to 0.23-12.18.1
libexiv2-12-debuginfo - update to 0.23-12.18.1
libexiv2-devel - addressed in versions 0.23-12.18.1, 0.26-150000.6.26.1
exiv2-debuginfo - addressed in versions 0.23-12.18.1, 0.26-150000.6.26.1
libexiv2-26-32bit-debuginfo - addressed in versions 0.26-150000.6.26.1, 0.26-150400.9.21.1
libexiv2-26-32bit - addressed in versions 0.26-150000.6.26.1, 0.26-150400.9.21.1
exiv2-lang - update to 0.26-150000.6.26.1
libexiv2-doc - update to 0.26-150000.6.26.1
libexiv2-26-debuginfo - addressed in versions 0.26-150000.6.26.1, 0.26-150400.9.21.1
libexiv2-26 - addressed in versions 0.26-150000.6.26.1, 0.26-150400.9.21.1
exiv2 - update to 0.26-150000.6.26.1
mingw-exiv2 - update to 0.27-3.fc30

External References

Related Security Bulletins