USN-4056-1
Dashboard / Vulnerabilities / USN-4056-1
USN-4056-1
Summary: exiv2 vulnerabilities
Details: It was discovered that Exiv2 incorrectly handled certain PSD files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-19107, CVE-2018-19108) It was discovered that Exiv2 incorrectly handled certain PNG files. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-19535, CVE-2019-13112) It was discovered that Exiv2 incorrectly handled certain CRW files. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-13110, CVE-2019-13113) It was discovered that incorrectly handled certain HTTP requests. An attacker could possibly use this issue to cause a denial of service. (CVE-2019-13114)
References: https://ubuntu.com/security/notices/USN-4056-1, https://ubuntu.com/security/CVE-2018-19107, https://ubuntu.com/security/CVE-2018-19108, https://ubuntu.com/security/CVE-2018-19535, https://ubuntu.com/security/CVE-2019-13110, https://ubuntu.com/security/CVE-2019-13112, https://ubuntu.com/security/CVE-2019-13113, https://ubuntu.com/security/CVE-2019-13114
Affected packages
Package
Name: exiv2
Purl: pkg:deb/ubuntu/[email protected]?arch=source&distro=xenial
Affected ranges
Type: ECOSYSTEM
Events:
