CVE-2017-11683 PUBLISHED

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.

EPSS 0.48% · 64.9th percentile

Risk Scores

EPSS Score
0.48%
64.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSexiv20, 0.23-1ubuntu1, 0.23-1ubuntu2
Ubuntu:16.04:LTSexiv20, 0.25-1ubuntu1, 0.25-2.1
Ubuntu:18.04:LTSexiv20, 0.25-3.1, 0.25-3.1ubuntu0.18.04.1

Timeline

References

Open in Interactive Console →