Buffer Overflow Vulnerability in Exiv2 by Exiv2 Project
CVE-2020-19716

6.5MEDIUM

Key Information:

Vendor

Exiv2

Status
Exiv2
Vendor
CVE Published:
13 July 2021

What is CVE-2020-19716?

A buffer overflow issue exists in the Databuf function located in types.cpp of Exiv2 version 0.27.1. This vulnerability can potentially allow an attacker to disrupt the service, leading to denial of service (DoS) conditions. The flaw occurs due to improper handling of data, which could be exploited under specific circumstances, thereby compromising the stability of the application.

References

https://github.com/Exiv2/exiv2/issues/980
https://lists.debian.org/debian-lts-announce/2022/11/msg0...
mailing-list

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.