CVE-2020-19716
Fixed in a distro release EPSS 1%
A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of service (DOS).
Products: exiv2, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | exiv2 | 0.25-4+deb10u3 |
| Debian 12 | exiv2 | 0.27.2-6 |
| Debian 13 | exiv2 | 0.27.2-6 |
| Debian 14 | exiv2 | 0.27.2-6 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | exiv2 | 0.27.5-150400.15.4.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | exiv2-0_26 | 0.26-150400.9.16.1 |
| openSUSE Leap 15.4 | exiv2 | 0.27.5-150400.15.4.1 |
| openSUSE Leap 15.4 | exiv2-0_26 | 0.26-150400.9.16.1 |
| openSUSE Tumbleweed | exiv2 | 0.27.5-3.1 |