Msrc Azl3 Exiv2 0.28.3-1 On Azure Linux 3.0 vulnerabilities
4 known vulnerabilities affecting msrc/azl3_exiv2_0.28.3-1_on_azure_linux_3.0.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2024-39695MEDIUMCVSS 5.32024-07-09
CVE-2024-39695 [MEDIUM] CWE-125 Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
Exiv2 has an out-of-bounds read in AsfVideo::streamProperties
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source librarie
msrc
CVE-2024-25112MEDIUMCVSS 5.52024-02-13
CVE-2024-25112 [MEDIUM] CWE-400 Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
Denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder in Exiv2
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with
msrc
CVE-2024-24826MEDIUMCVSS 5.52024-02-13
CVE-2024-24826 [MEDIUM] CWE-125 Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
Out-of-bounds read in QuickTimeVideo::NikonTagsDecoder in Exiv2
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libr
msrc
CVE-2023-44398HIGHCVSS 8.82023-11-14
CVE-2023-44398 [HIGH] CWE-787 Out-of-bounds write in exiv2
Out-of-bounds write in exiv2
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to trans
msrc