Alerts This Week
Warning Icon 1 914
Alerts This Week
Warning Icon 1 914

Mageia 7: 2020-0196 Moderate: Exiv2 DoS via WEBP Image Exploit

mageia
Calendar Grey May 5, 2020
Dist Mageia Esm H88
Newly released updates fix a critical vulnerability in Exiv2, which can cause Denial of Service when processing specially crafted WEBP images, impacting Mageia 7.
The updated packages fix a security vulnerability: A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap a...

Summary

The updated packages fix a security vulnerability:
A WebPImage::decodeChunks integer overflow in Exiv2 through 0.27.1 allows an attacker to cause a denial of service (large heap allocation followed by a very long running loop) via a crafted WEBP image file. (CVE-2019-13111)

References

- https://bugs.mageia.org/show_bug.cgi?id=26561

- https://access.redhat.com/errata/RHSA-2020:1577

- https://www.cve.org/CVERecord?id=CVE-2019-13111

Topics%20covered

Topics Covered

security advisory denial of service exiv2 mageia heap allocation

Resolution

SRPMS

- 7/core/exiv2-0.27.1-3.4.mga7

Publication date: 05 May 2020
URL: https://advisories.mageia.org/MGASA-2020-0196.html
Type: security
CVE: CVE-2019-13111

Topics%20covered

Topics Covered

security advisory denial of service exiv2 mageia heap allocation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here