Every CVE Search/ Get API key

CVE-2017-17669

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of...

5.5 MediumFix available

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.60%Up 0.6 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
CVE-2017-17669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-125
Updated
2026-11-02
CVE List No score

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
CVE-2017-17669
Updated
2026-11-02
EUVDEUVD-2017-0054 No score

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
EUVD-2017-0054
Updated
2026-11-03
GitHub AdvisoriesGHSA-4635-wwr6-rxx5 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of...

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
GHSA-4635-wwr6-rxx5
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
CVE-2017-17669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-17669 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
DEBIAN-CVE-2017-17669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVPYSEC-2017-140 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
PYSEC-2017-140
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2017-17669 5.5

There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will lead to a remote denial of service attack.

Record
UBUNTU-CVE-2017-17669
CVSS 3.1
5.5 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2018:3882-1 No score

Security update for exiv2

This update for exiv2 fixes the following issues:

  • CVE-2017-11591: A floating point exception in the Exiv2::ValueType function could lead to a remote denial of service attack via crafted input. (bsc#1050257)
  • CVE-2017-14864: An invalid memory address dereference was discovered in Exiv2::getULong in types.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1060995)
  • CVE-2017-14862: An invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1060996)
  • CVE-2017-14859: An invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1061000)
  • CVE-2017-11683: There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp that could lead to a remote denial of service attack via crafted input. (bsc#1051188)
  • CVE-2017-17669: There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp. A crafted PNG file would lead to a remote denial of service attack. (bsc#1072928)
  • CVE-2018-10958: In types.cpp a large size value might have lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call. (bsc#1092952)
  • CVE-2018-10998: readMetadata in jp2image.cpp allowed remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call. (bsc#1093095)
  • CVE-2018-11531: Exiv2 had a heap-based buffer overflow in getData in preview.cpp. (bsc#1095070)
Record
SUSE-SU-2018:3882-1
Updated
2026-11-02
OSVSUSE-SU-2018:3882-2 No score

Security update for exiv2

This update for exiv2 fixes the following issues:

  • CVE-2017-11591: A floating point exception in the Exiv2::ValueType function could lead to a remote denial of service attack via crafted input. (bsc#1050257)
  • CVE-2017-14864: An invalid memory address dereference was discovered in Exiv2::getULong in types.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1060995)
  • CVE-2017-14862: An invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1060996)
  • CVE-2017-14859: An invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp. The vulnerability caused a segmentation fault and application crash, which lead to denial of service. (bsc#1061000)
  • CVE-2017-11683: There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp that could lead to a remote denial of service attack via crafted input. (bsc#1051188)
  • CVE-2017-17669: There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp. A crafted PNG file would lead to a remote denial of service attack. (bsc#1072928)
  • CVE-2018-10958: In types.cpp a large size value might have lead to a SIGABRT during an attempt at memory allocation for an Exiv2::Internal::PngChunk::zlibUncompress call. (bsc#1092952)
  • CVE-2018-10998: readMetadata in jp2image.cpp allowed remote attackers to cause a denial of service (SIGABRT) by triggering an incorrect Safe::add call. (bsc#1093095)
  • CVE-2018-11531: Exiv2 had a heap-based buffer overflow in getData in preview.cpp. (bsc#1095070)
Record
SUSE-SU-2018:3882-2
Updated
2026-11-02
OSVUSN-3852-1 No score

exiv2 vulnerabilities

It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. CVE-2017-9239 only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-11591, CVE-2017-11683, CVE-2017-14859, CVE-2017-14862, CVE-2017-14864, CVE-2017-17669, CVE-2017-9239, CVE-2018-16336, CVE-2018-1758)

Record
USN-3852-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
exiv2
Debian:12
 before 0.27.2-6
0.27.2-6
exiv2
Debian:13
 before 0.27.2-6
0.27.2-6
exiv2
Debian:14
 before 0.27.2-6
0.27.2-6
exiv2
Debian:10
From an advisory covering 26 CVEs
 before 0.25-4+deb10u4, plus listed versions
0.25-40.25-4+deb10u10.25-4+deb10u20.25-4+deb10u3
0.25-4+deb10u4
exiv2
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
Show 8 moreShow less
Affected packages
PackageAffectedFixed
exiv2
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 9 CVEs
 before 0.23-12.5.1
0.23-12.5.1
exiv2
Ubuntu:14.04:LTS
 before 0.23-1ubuntu2.2, plus listed versions
0.23-1ubuntu10.23-1ubuntu20.23-1ubuntu2.1
0.23-1ubuntu2.2
exiv2
Ubuntu:16.04:LTS
 before 0.25-2.1ubuntu16.04.3, plus listed versions
0.25-1ubuntu10.25-2.10.25-2.1ubuntu16.04.10.25-2.1ubuntu16.04.2
0.25-2.1ubuntu16.04.3
exiv2
Ubuntu:18.04:LTS
 before 0.25-3.1ubuntu0.18.04.2, plus listed versions
0.25-3.10.25-3.1ubuntu0.18.04.1
0.25-3.1ubuntu0.18.04.2
exiv2
Ubuntu:14.04:LTS
From an advisory covering 9 CVEs
 before 0.23-1ubuntu2.2, plus listed versions
0.23-1ubuntu10.23-1ubuntu20.23-1ubuntu2.1
0.23-1ubuntu2.2
exiv2
Ubuntu:16.04:LTS
From an advisory covering 9 CVEs
 before 0.25-2.1ubuntu16.04.3, plus listed versions
0.25-1ubuntu10.25-2.10.25-2.1ubuntu16.04.10.25-2.1ubuntu16.04.2
0.25-2.1ubuntu16.04.3
exiv2
Ubuntu:18.04:LTS
From an advisory covering 9 CVEs
 before 0.25-3.1ubuntu0.18.04.2, plus listed versions
0.25-3.10.25-3.1ubuntu0.18.04.1
0.25-3.1ubuntu0.18.04.2

History

History
RecordedChangedSources
affected, facts
affected
affected, aliases, referencesEUVD
first indexedOSV
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-17669 is a medium vulnerability (CVSS 5.5) in Exiv2, published December 13, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.60%, the 75th percentile. Fixed in exiv2 0.27.2-6.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open