GCVE-VVD-MAGEIA-2020-84 — Vulnetix

GCVE-VVD-MAGEIA-2020-84

Advisory Published

Vulnetix · Advisory published April 1, 2020

The updated packages fix a security vulnerability: In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input file can result in an infinite loop and hang, with high CPU consumption. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted file. (CVE-2019-20421)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	gnubg	0 (affected), 1.06.002-2.1.mga7 (unaffected)	—
Mageia	exiv2	0 (affected), 0.27.1-3.3.mga7 (unaffected), 0 (affected), 0.27.1-3.3.mga7 (unaffected)	—

Aliases

Transitive aliases

CVE-2017-18005 PYSEC-2018-137 GSD-2018-17230 GSD-2019-9143 EUVD-2019-4654 EUVD-2018-0069 CNVD-2019-34612 GSD-2019-14368 CVE-2018-9304 VVD-GENTOO-2019-701902 CVE-2018-17230 GHSA-vcrp-2wmj-jrg8 BDU:2020-02400 VVD-MAGEIA-2020-196 EUVD-2018-0061 GHSA-8x93-7gj9-73c3 PYSEC-2018-144 EUVD-2019-0051 CVE-2019-13112 EUVD-2018-0059 GSD-2018-17229 CNVD-2018-03077 BDU:2023-01645 CNVD-2019-24854 GHSA-6f7h-8q6h-fvcx PYSEC-2020-344 CVE-2019-13109 CVE-2018-17229 EUVD-2017-0055 CNVD-2018-02169 PYSEC-2019-245 CVE-2019-13108 EUVD-2020-0077 GHSA-p4gw-2vrq-j64q CNVD-2018-19608 GSD-2018-14338 EUVD-2018-20898 EUVD-2019-4650 GSD-2019-14369 CVE-2019-9143 GHSA-798v-99wc-4f26 PYSEC-2019-244 CVE-2018-14338 CVE-2019-14369 GHSA-crvf-2mp8-85gm GHSA-m3fr-3g6g-rc8x GHSA-x4fr-qpcc-rhww CVE-2018-4868 GSD-2018-4868 BDU:2023-01656 EUVD-2019-4651 MSRC_CVE-2019-20421 CVE-2018-9306 CVE-2019-13113 CVE-2019-13111 EUVD-2018-0062 BDU:2023-05469 PYSEC-2017-141 CNVD-2019-24853 GHSA-4256-mfgg-45jq VVD-MAGEIA-2019-415 BDU:2020-02399 GHSA-hmv7-h8ff-46mm EUVD-2019-4652 GSD-2017-18005 EUVD-2019-0049 CVE-2019-13110 BDU:2021-01492 GHSA-78r6-w4c8-vpmp GHSA-5w5r-cgx2-jf78 PYSEC-2019-248 GHSA-7jp6-64vf-6wq3 GHSA-6cf5-9vcc-r289 GHSA-824g-h3q7-mx9v GHSA-766f-8g6j-2m24 CVE-2018-9303 CVE-2019-14370 CVE-2019-14368 PYSEC-2018-134 EUVD-2018-20897 EUVD-2018-20900 EUVD-2019-4655 GHSA-f8xc-4q5g-48f2 GSD-2019-20421 CVE-2019-13114 EUVD-2019-4653 GHSA-pvvg-cg5r-2q8v CNVD-2019-32254 CNVD-2018-19609 GHSA-mv4f-jcrp-vghh EUVD-2019-4649 ALSA-2020:1577 BDU:2020-02398 EUVD-2019-0053 PYSEC-2018-136 EUVD-2019-0050 PYSEC-2019-246 BDU:2020-02397 GSD-2019-14370 BDU:2023-01660

References

Updated exiv2 packages fix security vulnerability

advisory

Updated exiv2 packages fix security vulnerability

advisory

Updated exiv2 packages fix security vulnerability

issue

Updated gnubg packages fix buffer overflow for Spanish locales

advisory

Updated gnubg packages fix buffer overflow for Spanish locales

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›