Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 8: DLA-2019-1 Critical Vulnerability in exiv2 Denial of Service

debian lts
Calendar Grey December 2, 2019
Dist Debian Esm H88
To fix a denial of service vulnerability with CRW images, upgrade your exiv2 package on Debian 8 by following these simple steps to improve security
A corrupted or specially crafted CRW images might exceed the overall buffersize to cause a denial of service

Summary

For Debian 8 "Jessie", this problem has been fixed in version
0.24-4.1+deb8u5.

We recommend that you upgrade your exiv2 packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: exiv2
Version: 0.24-4.1+deb8u5
CVE ID: CVE-2019-17402

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here