Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Mageia 8 MGASA-2021-0396 Critical: Exiv2 Buffer Overflow DoS

mageia
Calendar Grey August 6, 2021
Dist Mageia Esm H88
Recent updates to exiv2 packages in Mageia address a buffer overflow vulnerability that may cause denial of service. For more details, see the information provided
Updated exiv2 packages fix security vulnerability: A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) v...

Summary

Updated exiv2 packages fix security vulnerability:
A heap-based buffer overflow vulnerability in jp2image.cpp of Exiv2 0.27.3 allows attackers to cause a denial of service (DOS) via crafted metadata (CVE-2021-31291).

References

- https://bugs.mageia.org/show_bug.cgi?id=29325

- https://www.cve.org/CVERecord?id=CVE-2021-31291

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow Mageia Exiv2

Resolution

SRPMS

- 8/core/exiv2-0.27.3-1.2.mga8

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 06 Aug 2021
URL: https://advisories.mageia.org/MGASA-2021-0396.html
Type: security
CVE: CVE-2021-31291

Topics%20covered

Topics Covered

security advisory denial of service update buffer overflow Mageia Exiv2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here