CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1465061 Exploit Issue Tracking Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:exiv2:exiv2:0.26:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

Information

Published : 2017-06-26 16:29

Updated : 2017-06-30 09:11


NVD link : CVE-2017-9953

Mitre link : CVE-2017-9953


JSON object : View

CWE
CWE-416

Use After Free

Advertisement

dedicated server usa

Products Affected

exiv2

  • exiv2

redhat

  • enterprise_linux