There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
References
Link | Resource |
---|---|
https://github.com/Exiv2/exiv2/issues/511 | Exploit Patch Third Party Advisory |
https://access.redhat.com/errata/RHSA-2019:2101 |
Configurations
Information
Published : 2018-11-02 21:29
Updated : 2019-10-02 17:03
NVD link : CVE-2018-18915
Mitre link : CVE-2018-18915
JSON object : View
CWE
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
Products Affected
exiv2
- exiv2