Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-5772

Fixed in a distro release EPSS 2%

In Exiv2 0.26, there is a segmentation fault caused by uncontrolled recursion in the Exiv2::Image::printIFDStructure function in the image.cpp file. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted tif file.

Published 2018-01-18 · CVE record · OSV

Products: exiv2

Distro releases

ReleasePackageFixed in
SUSE Enterprise Storage 6exiv20.26-150000.6.16.1
SUSE Enterprise Storage 7exiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOSexiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOSexiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15-ESPOSexiv20.26-150000.6.16.1
SUSE Linux Enterprise High Performance Computing 15-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP3exiv20.26-150000.6.16.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP4exiv20.26-150000.6.16.1
SUSE Linux Enterprise Server 15 SP1-BCLexiv20.26-150000.6.16.1
SUSE Linux Enterprise Server 15 SP1-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise Server 15 SP2-BCLexiv20.26-150000.6.16.1
SUSE Linux Enterprise Server 15 SP2-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise Server 15-LTSSexiv20.26-150000.6.16.1
SUSE Linux Enterprise Server for SAP Applications 15exiv20.26-150000.6.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1exiv20.26-150000.6.16.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2exiv20.26-150000.6.16.1
SUSE Manager Proxy 4.1exiv20.26-150000.6.16.1
SUSE Manager Retail Branch Server 4.1exiv20.26-150000.6.16.1
SUSE Manager Server 4.1exiv20.26-150000.6.16.1
openSUSE Leap 15.3exiv20.26-150000.6.16.1
openSUSE Leap 15.4exiv20.26-150000.6.16.1