CVE-2018-10999 — Out-of-bounds Read in Exiv2

CWE-125 — Out-of-bounds Read16 documents7 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 36.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Exiv2Debian Exiv2Canonical Ubuntu Linux+1 more
Timeline
PublishedMay 12
Latest updateMay 13

Description

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages4 packages

▶debiandebian/exiv2< exiv2 0.27.2-6 (bookworm)+1
▶Debianexiv2/exiv2< 0.27.2-6+7
▶Ubuntuexiv2/exiv2< 0.23-1ubuntu2.1+2
▶NVDexiv2/exiv20.26

Also affects: Debian Linux 8.0, 9.0, Ubuntu Linux 14.04, 16.04, 17.10, 18.04, 18.10

🔴Vulnerability Details

6
GHSA
GHSA-f8wg-6gh7-2p7p: Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0↗2022-05-13
▶
GHSA
GHSA-77hq-vrjm-gxpm: An issue was discovered in Exiv2 0↗2022-05-13
▶
OSV
CVE-2018-16336: Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0↗2018-09-02
▶
OSV
CVE-2018-10999: Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0↗2018-09-02
▶
OSV
exiv2 vulnerabilities↗2018-07-03
▶

📋Vendor Advisories

5
Red Hat
exiv2: heap-based buffer over-read via a crafted image file↗2018-08-13
▶
Ubuntu
Exiv2 vulnerabilities↗2018-07-03
▶
Red Hat
exiv2: heap-based buffer over-read in parseTXTChunk function↗2018-05-12
▶
Debian
CVE-2018-16336: exiv2 - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26 allows remote attackers ...↗2018
▶
Debian
CVE-2018-10999: exiv2 - An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTCh...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-16336 exiv2: heap-based buffer over-read via a crafted image file↗2018-09-03
▶
Bugzilla
CVE-2018-10999 exiv2: heap-based buffer over-read in parseTXTChunk function↗2018-05-17
▶
Bugzilla
CVE-2018-10998 CVE-2018-10999 CVE-2018-11037 exiv2: various flaws [fedora-all]↗2018-05-17
▶