p PatchFirst

CVE-2017-9239

CVE-2017-9239

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage will use the value of pValue() to cause a segmentation fault. To exploit this vulnerability, someone must open a crafted tiff file.

CVSS 6.5 · Medium · EPSS 2.6% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • exiv2 Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.25-3.1

    Update to 0.25-3.1

  • exiv2 Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.25-3.1

    Update to 0.25-3.1

  • exiv2 Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.25-3.1

    Update to 0.25-3.1

  • exiv2 PyPI

    Versions
    • 0.1
    • 0.11.0
    • 0.11.1
    • 0.11.2
    • 0.11.3
    • 0.12.0
    • 0.12.1
    • 0.13.0
    • 0.13.1
    • 0.13.2
    • 0.14.0
    • 0.14.1
    • 0.2
    • 0.3
    • 0.3.1
    • 0.15.0
    • 0.16.0
    • 0.16.1
    • 0.16.2
    • 0.16.2.post1
    • 0.16.3
    • 0.16.3.post1
    • 0.17.0
    • 0.17.1
    • 0.17.2
    • 0.17.3
    • 0.17.4
    • 0.17.5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • exiv2 Ubuntu:14.04:LTS

    Versions
    • 0.23-1ubuntu1
    • 0.23-1ubuntu2
    • 0.23-1ubuntu2.1
    Affected ranges
    • ECOSYSTEM: < 0.23-1ubuntu2.2

    Update to 0.23-1ubuntu2.2

  • exiv2 Ubuntu:16.04:LTS

    Versions
    • 0.25-1ubuntu1
    • 0.25-2.1
    • 0.25-2.1ubuntu16.04.1
    • 0.25-2.1ubuntu16.04.2
    Affected ranges
    • ECOSYSTEM: < 0.25-2.1ubuntu16.04.3

    Update to 0.25-2.1ubuntu16.04.3

Original sources

Check your server →