Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia: 2020-0084 Denial Of Service in Exiv2 High CPU Usage

mageia
Calendar Grey February 13, 2020
Dist Mageia Esm H88
Revised exiv2 installations mitigate a denial of service risk in Mageia 7. Essential security improvements are featured.
The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CP...

Summary

The updated packages fix a security vulnerability:
In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file. (CVE-2019-20421)

References

- https://bugs.mageia.org/show_bug.cgi?id=26171

- https://ubuntu.com/security/notices/USN-4270-1

- https://www.cve.org/CVERecord?id=CVE-2019-20421

Topics%20covered

Topics Covered

security advisory denial of service software update exiv2 Mageia

Resolution

SRPMS

- 7/core/exiv2-0.27.1-3.3.mga7

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 13 Feb 2020
URL: https://advisories.mageia.org/MGASA-2020-0084.html
Type: security
CVE: CVE-2019-20421

Topics%20covered

Topics Covered

security advisory denial of service software update exiv2 Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here