CVE-2017-11592
Fixed in a distro release EPSS 2%
There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek function of Exiv2 0.26 that will lead to a remote denial of service attack (heap memory corruption) via crafted input.
Products: exiv2
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | exiv2 | 0.27.1-1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 | exiv2 | 0.26-6.3.1 |