PT-2018-14718
CVE-2018-18915
·
Published
2018-11-02
·
Updated
2022-10-17
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Exiv2 version 0.27-RC1
Description
The issue is related to an infinite loop in the Exiv2::Image::printIFDStructure function, which can be triggered by a crafted input. This can lead to a remote denial of service attack.
Recommendations
For Exiv2 version 0.27-RC1, consider disabling the Exiv2::Image::printIFDStructure function until a patch is available to prevent potential denial of service attacks.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾