Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.
First Last Prev Next    This bug is not in your last search results.
Bug 1545249 - (CVE-2017-17723) CVE-2017-17723 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4 in image.cpp
CVE-2017-17723 exiv2: heap-based buffer over-read in Exiv2::Image::byteSwap4...
Status: CLOSED NOTABUG
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
unspecified
All Linux
low Severity low
: ---
: ---
Assigned To: Red Hat Product Security
impact=low,public=20171210,reported=2...
: Security
Depends On: 1545250 1547488 1547489
Blocks: 1545252
  Show dependency tree / graph
 
Reported: 2018-02-14 08:25 EST by Laura Pardo
Modified: 2018-03-14 05:18 EDT (History)
5 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
An integer wraparound, leading to heap-based out-of-bound read, was found in the way Exiv2 library prints Image File Directory(IFD) in TIFF images. By persuading a victim to open a crafted TIFF image, a remote attacker could crash the application or possibly retrieve a portion of memory.
Story Points: ---
Clone Of:
Environment:
Last Closed: 2018-03-14 05:18:20 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

  None (edit)
Description Laura Pardo 2018-02-14 08:25:18 EST 
A flaw was found in Exiv2 0.26, there is a integer wraparound in the
Exiv2::Image::printIFDStructure function, leading to a heap-based buffer
over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote
attackers can exploit this vulnerability to disclose memory data or cause a
denial of service via a crafted TIFF file.


References:
https://bugzilla.redhat.com/show_bug.cgi?id=1524104
https://github.com/Exiv2/exiv2/issues/229
Comment 1 Laura Pardo 2018-02-14 08:25:41 EST 
Created exiv2 tracking bugs for this issue:

Affects: fedora-all [bug 1545250]
Comment 6 Riccardo Schirone 2018-02-21 07:58:31 EST 
Statement:

This issue did not affect the versions of Exiv2 as shipped with Red Hat Enterprise Linux 6 and 7.
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.