Bug 1997745 (CVE-2020-18771) - CVE-2020-18771 exiv2: buffer overflow in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp
Summary: CVE-2020-18771 exiv2: buffer overflow in Exiv2::Internal::Nikon1MakerNote::pr...
Keywords:
Status: NEW
Alias: CVE-2020-18771
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 1997746 1997747 1997949 1997950
Blocks: 1997748
TreeView+ depends on / blocked
 
Reported: 2021-08-25 18:04 UTC by Guilherme de Almeida Suckevicz
Modified: 2023-07-07 08:31 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description Guilherme de Almeida Suckevicz 2021-08-25 18:04:49 UTC 
Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.

Reference:
https://github.com/Exiv2/exiv2/issues/756
Comment 1 Guilherme de Almeida Suckevicz 2021-08-25 18:05:52 UTC 
Created exiv2 tracking bugs for this issue:

Affects: fedora-all [bug 1997746]


Created mingw-exiv2 tracking bugs for this issue:

Affects: fedora-all [bug 1997747]
Comment 2 Huzaifa S. Sidhpurwala 2021-08-26 07:03:52 UTC 
Upstream patch: https://github.com/Exiv2/exiv2/commit/476be794d0cdc2f63083221469019141d0a81389
Note You need to log in before you can comment on or make changes to this bug.