There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted input will lead to a remote denial of service attack.
References
Link | Resource |
---|---|
https://bugzilla.redhat.com/show_bug.cgi?id=1470950 | Issue Tracking |
Configurations
Information
Published : 2017-07-17 06:18
Updated : 2017-07-20 05:03
NVD link : CVE-2017-11340
Mitre link : CVE-2017-11340
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
exiv2
- exiv2