CVE-2020-18899 PUBLISHED

An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.

EPSS 0.11% · 29.0th percentile

Risk Scores

EPSS Score
0.11%
29.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSexiv20, 0.25-1ubuntu1, 0.25-2.1
Ubuntu:18.04:LTSexiv20.25-3.1, 0.25-3.1ubuntu0.18.04.1, 0.25-3.1ubuntu0.18.04.2

Timeline

References

Open in Interactive Console →