ISOMAN

CVE

CVE-2018-10999

An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer over-read.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource
Ubuntu14.04.6 amd64 desktopunknownsource
Ubuntu14.04.6 i386 desktopunknownsource
Ubuntu14.04.6 amd64 serverunknownsource
Ubuntu14.04.6 i386 serverunknownsource

References

  1. https://github.com/Exiv2/exiv2/issues/306
  2. https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html
  3. https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html
  4. https://security.gentoo.org/glsa/201811-14
  5. https://usn.ubuntu.com/3700-1/
  6. https://www.debian.org/security/2018/dsa-4238
  7. https://github.com/Exiv2/exiv2/issues/306
  8. https://lists.debian.org/debian-lts-announce/2018/06/msg00010.html
  9. https://lists.debian.org/debian-lts-announce/2018/10/msg00012.html
  10. https://security.gentoo.org/glsa/201811-14
  11. https://usn.ubuntu.com/3700-1/
  12. https://www.debian.org/security/2018/dsa-4238