CVE-2017-1000128
Fixed in a distro release EPSS 1%
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
Products: exiv2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | exiv2 | 0.27.5-150400.15.4.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | exiv2-0_26 | 0.26-150400.9.16.1 |
| openSUSE Leap 15.4 | exiv2 | 0.27.5-150400.15.4.1 |
| openSUSE Leap 15.4 | exiv2-0_26 | 0.26-150400.9.16.1 |
| openSUSE Tumbleweed | exiv2 | 0.27.4-1.2 |