CVE-2018-19108
In Exiv2 0.26, Exiv2::PsdImage::readMetadata in psdimage.cpp in the PSD image reader may suffer from a denial of service (infinite loop) caused by an integer overflow via a crafted PSD image file.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2018-11-08
- Last modified
- 2024-08-05
- Weaknesses
- CWE-835
Affected products
- Ubuntu Linux (Canonical)
- Debian Linux (Debian)
- Exiv2 (Exiv2)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Workstation (Redhat)
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
- https://access.redhat.com/errata/RHSA-2019:2101
- https://github.com/Exiv2/exiv2/issues/426
- https://github.com/Exiv2/exiv2/pull/518
- https://lists.debian.org/debian-lts-announce/2019/02/msg00038.html
- https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
- https://usn.ubuntu.com/4056-1/
