Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-11337

Fixed in a distro release EPSS 1%

There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

Published 2017-07-16 · CVE record · OSV

Products: exiv2

Distro releases

ReleasePackageFixed in
SUSE Linux Enterprise Module for Desktop Applications 15exiv20.26-6.3.1