CVE-2018-18915
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0...
CVE-2018-18915 is a medium vulnerability (CVSS 6.5) in Exiv2, published November 3, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in exiv2-devel 0.27.2-5.el8.
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
CVE-2018-18915- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-835
- Updated
- 2026-11-02
CVE List No score
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
CVE-2018-18915- Updated
- 2026-11-02
EUVDEUVD-2018-0065 No score
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
EUVD-2018-0065- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mmfw-8c89-fjj3
6.5
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0...
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
GHSA-mmfw-8c89-fjj3- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-835
- Updated
- 2026-11-02
OSV
6.5
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
CVE-2018-18915- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVPYSEC-2018-140
6.5
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.27-RC1. A crafted input will lead to a remote denial of service attack.
- Record
PYSEC-2018-140- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2019:2101
5.3
Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
- Record
RHSA-2019:2101- CVSS 3.0
- 5.3 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVRHSA-2020:1577
7.5
Red Hat Security Advisory: exiv2 security, bug fix, and enhancement update
- Record
RHSA-2020:1577- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2020:1577
7.5
Moderate: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)
Security Fix(es):
-
exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)
-
exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)
-
exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)
-
exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)
-
exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)
-
exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)
-
exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)
-
exiv2: information leak via a crafted file (CVE-2018-11037)
-
exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)
-
exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)
-
exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)
-
exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)
-
exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)
-
exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)
-
exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)
-
exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)
-
exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)
-
exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)
-
exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)
-
exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)
-
exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)
-
exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)
-
exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)
-
exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)
-
exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)
-
exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)
-
exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)
-
exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)
-
exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Rocky Linux 8.2 Release Notes linked from the References section.
- Record
RLSA-2020:1577- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2020:1577 No score
Moderate: exiv2 security, bug fix, and enhancement update
The exiv2 packages provide a command line utility which can display and manipulate image metadata such as EXIF, LPTC, and JPEG comments.
The following packages have been upgraded to a later upstream version: exiv2 (0.27.2). (BZ#1651917)
Security Fix(es):
-
exiv2: infinite loop and hang in Jp2Image::readMetadata() in jp2image.cpp could lead to DoS (CVE-2019-20421)
-
exiv2: null pointer dereference in the Exiv2::DataValue::toLong function in value.cpp (CVE-2017-18005)
-
exiv2: Excessive memory allocation in Exiv2::Jp2Image::readMetadata function in jp2image.cpp (CVE-2018-4868)
-
exiv2: assertion failure in BigTiffImage::readData in bigtiffimage.cpp (CVE-2018-9303)
-
exiv2: divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp (CVE-2018-9304)
-
exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9305)
-
exiv2: OOB read in pngimage.cpp:tEXtToDataBuf() allows for crash via crafted file (CVE-2018-10772)
-
exiv2: information leak via a crafted file (CVE-2018-11037)
-
exiv2: buffer overflow in samples/geotag.cpp (CVE-2018-14338)
-
exiv2: heap-based buffer overflow in Exiv2::d2Data in types.cpp (CVE-2018-17229)
-
exiv2: heap-based buffer overflow in Exiv2::ul2Data in types.cpp (CVE-2018-17230)
-
exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash (CVE-2018-17282)
-
exiv2: Stack overflow in CiffDirectory::readDirectory() at crwimage_int.cpp leading to denial of service (CVE-2018-17581)
-
exiv2: infinite loop in Exiv2::Image::printIFDStructure function in image.cpp (CVE-2018-18915)
-
exiv2: heap-based buffer over-read in Exiv2::IptcParser::decode in iptc.cpp (CVE-2018-19107)
-
exiv2: infinite loop in Exiv2::PsdImage::readMetadata in psdimage.cpp (CVE-2018-19108)
-
exiv2: heap-based buffer over-read in PngChunk::readRawProfile in pngchunk_int.cpp (CVE-2018-19535)
-
exiv2: NULL pointer dereference in Exiv2::isoSpeed in easyaccess.cpp (CVE-2018-19607)
-
exiv2: Heap-based buffer over-read in Exiv2::tEXtToDataBuf function resulting in a denial of service (CVE-2018-20096)
-
exiv2: Segmentation fault in Exiv2::Internal::TiffParserWorker::findPrimaryGroups function (CVE-2018-20097)
-
exiv2: Heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20098)
-
exiv2: Infinite loop in Exiv2::Jp2Image::encodeJp2Header resulting in a denial of service (CVE-2018-20099)
-
exiv2: infinite recursion in Exiv2::Image::printTiffStructure in file image.cpp resulting in denial of service (CVE-2019-9143)
-
exiv2: denial of service in PngImage::readMetadata (CVE-2019-13109)
-
exiv2: integer overflow in WebPImage::decodeChunks leads to denial of service (CVE-2019-13111)
-
exiv2: uncontrolled memory allocation in PngChunk::parseChunkContent causing denial of service (CVE-2019-13112)
-
exiv2: invalid data location in CRW image file causing denial of service (CVE-2019-13113)
-
exiv2: null-pointer dereference in http.c causing denial of service (CVE-2019-13114)
-
exiv2: out of bounds read in IptcData::printStructure in iptc.c (CVE-2018-9306)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2020:1577- Updated
- 2026-11-02
OSVSUSE-SU-2022:3598-1 No score
Security update for exiv2
This update for exiv2 fixes the following issues:
- CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
- CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
- CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
- CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
- CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity) (bsc#1186192).
- CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
- CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of service (bsc#1188733).
- CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
- CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
- CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
- CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in canonmn_int.cpp (bsc#1086798).
- CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-bounds read (bsc#1086810).
- CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe Exiv2::Image::printIFDStructure (bsc#1076579).
- CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
- CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished (bsc#1092096).
- Record
SUSE-SU-2022:3598-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exiv2-develAlmaLinux:8 |
before 0.27.2-5.el8 | 0.27.2-5.el8 |
exiv2-docAlmaLinux:8 |
before 0.27.2-5.el8 | 0.27.2-5.el8 |
geglAlmaLinux:8 |
before 0.2.0-39.el8 | 0.2.0-39.el8 |
gnome-color-managerAlmaLinux:8 |
before 3.28.0-3.el8 | 3.28.0-3.el8 |
libgexiv2AlmaLinux:8 |
before 0.10.8-4.el8 | 0.10.8-4.el8 |
libgexiv2-develAlmaLinux:8 |
before 0.10.8-4.el8 | 0.10.8-4.el8 |
exiv2Red Hat:enterprise_linux:7::client |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-debuginfoRed Hat:enterprise_linux:7::client |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-libsRed Hat:enterprise_linux:7::client |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-develRed Hat:enterprise_linux:7::client |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
Show 68 moreShow less
| Package | Affected | Fixed |
|---|---|---|
exiv2-docRed Hat:enterprise_linux:7::client |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2Red Hat:enterprise_linux:7::computenode |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-debuginfoRed Hat:enterprise_linux:7::computenode |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-libsRed Hat:enterprise_linux:7::computenode |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-develRed Hat:enterprise_linux:7::computenode |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-docRed Hat:enterprise_linux:7::computenode |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2Red Hat:enterprise_linux:7::server |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-libsRed Hat:enterprise_linux:7::server |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-develRed Hat:enterprise_linux:7::server |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-docRed Hat:enterprise_linux:7::server |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2Red Hat:enterprise_linux:7::workstation |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-debuginfoRed Hat:enterprise_linux:7::workstation |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-libsRed Hat:enterprise_linux:7::workstation |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-develRed Hat:enterprise_linux:7::workstation |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2-docRed Hat:enterprise_linux:7::workstation |
before 0:0.27.0-2.el7_6 | 0:0.27.0-2.el7_6 |
exiv2Red Hat:enterprise_linux:8::appstream |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-libsRed Hat:enterprise_linux:8::appstream |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-libs-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
geglRed Hat:enterprise_linux:8::appstream |
before 0:0.2.0-39.el8 | 0:0.2.0-39.el8 |
gegl-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.2.0-39.el8 | 0:0.2.0-39.el8 |
gegl-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.2.0-39.el8 | 0:0.2.0-39.el8 |
gnome-color-managerRed Hat:enterprise_linux:8::appstream |
before 0:3.28.0-3.el8 | 0:3.28.0-3.el8 |
gnome-color-manager-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:3.28.0-3.el8 | 0:3.28.0-3.el8 |
gnome-color-manager-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:3.28.0-3.el8 | 0:3.28.0-3.el8 |
libgexiv2Red Hat:enterprise_linux:8::appstream |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
libgexiv2-debuginfoRed Hat:enterprise_linux:8::appstream |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
libgexiv2-debugsourceRed Hat:enterprise_linux:8::appstream |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
exiv2Red Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-develRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-docRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-libsRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
exiv2-libs-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
libgexiv2Red Hat:enterprise_linux:8::crb |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
libgexiv2-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
libgexiv2-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
libgexiv2-develRed Hat:enterprise_linux:8::crb |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
exiv2Rocky Linux:8 |
before 0:0.27.2-5.el8 | 0:0.27.2-5.el8 |
geglRocky Linux:8 |
before 0:0.2.0-39.el8 | 0:0.2.0-39.el8 |
gnome-color-managerRocky Linux:8 |
before 0:3.28.0-3.el8 | 0:3.28.0-3.el8 |
libgexiv2Rocky Linux:8 |
before 0:0.10.8-4.el8 | 0:0.10.8-4.el8 |
exiv2SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Module for Desktop Applications 15 SP4 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server 15-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server 15 SP1-BCL |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server 15 SP1-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server 15 SP2-BCL |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Manager Proxy 4.1 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Manager Retail Branch Server 4.1 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Manager Server 4.1 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Enterprise Storage 6 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2SUSE:Enterprise Storage 7 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2openSUSE:Leap 15.3 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
exiv2openSUSE:Leap 15.4 |
before 0.26-150000.6.16.1 | 0.26-150000.6.16.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | affected | |
| 2026-11-03 | affected, aliases, references | EUVD |
| 2026-11-02 | created | OSV |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
github.com/Exiv2/exiv2/issues/511
access.redhat.com/errata/RHSA-2019:2101
nvd.nist.gov/vuln/detail/CVE-2018-18915
github.com/advisories/GHSA-mmfw-8c89-fjj3
errata.almalinux.org/8/ALSA-2020-1577.html
vulners.com/cve/CVE-2017-18005
Show 194 moreShow less
vulners.com/cve/CVE-2018-10772
vulners.com/cve/CVE-2018-11037
vulners.com/cve/CVE-2018-14338
vulners.com/cve/CVE-2018-17229
vulners.com/cve/CVE-2018-17230
vulners.com/cve/CVE-2018-17282
vulners.com/cve/CVE-2018-17581
vulners.com/cve/CVE-2018-18915
vulners.com/cve/CVE-2018-19107
vulners.com/cve/CVE-2018-19108
vulners.com/cve/CVE-2018-19535
vulners.com/cve/CVE-2018-19607
vulners.com/cve/CVE-2018-20096
vulners.com/cve/CVE-2018-20097
vulners.com/cve/CVE-2018-20098
vulners.com/cve/CVE-2018-20099
vulners.com/cve/CVE-2018-4868
vulners.com/cve/CVE-2018-9303
vulners.com/cve/CVE-2018-9304
vulners.com/cve/CVE-2018-9305
vulners.com/cve/CVE-2018-9306
vulners.com/cve/CVE-2019-13109
vulners.com/cve/CVE-2019-13111
vulners.com/cve/CVE-2019-13112
vulners.com/cve/CVE-2019-13113
vulners.com/cve/CVE-2019-13114
vulners.com/cve/CVE-2019-20421
vulners.com/cve/CVE-2019-9143
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index
bugzilla.redhat.com/show_bug.cgi?id=1465061
bugzilla.redhat.com/show_bug.cgi?id=1470729
bugzilla.redhat.com/show_bug.cgi?id=1470737
bugzilla.redhat.com/show_bug.cgi?id=1470913
bugzilla.redhat.com/show_bug.cgi?id=1470946
bugzilla.redhat.com/show_bug.cgi?id=1470950
bugzilla.redhat.com/show_bug.cgi?id=1471772
bugzilla.redhat.com/show_bug.cgi?id=1473888
bugzilla.redhat.com/show_bug.cgi?id=1473889
bugzilla.redhat.com/show_bug.cgi?id=1475123
bugzilla.redhat.com/show_bug.cgi?id=1475124
bugzilla.redhat.com/show_bug.cgi?id=1482295
bugzilla.redhat.com/show_bug.cgi?id=1482296
bugzilla.redhat.com/show_bug.cgi?id=1482423
bugzilla.redhat.com/show_bug.cgi?id=1494443
bugzilla.redhat.com/show_bug.cgi?id=1494467
bugzilla.redhat.com/show_bug.cgi?id=1494776
bugzilla.redhat.com/show_bug.cgi?id=1494778
bugzilla.redhat.com/show_bug.cgi?id=1494780
bugzilla.redhat.com/show_bug.cgi?id=1494781
bugzilla.redhat.com/show_bug.cgi?id=1494782
bugzilla.redhat.com/show_bug.cgi?id=1494786
bugzilla.redhat.com/show_bug.cgi?id=1494787
bugzilla.redhat.com/show_bug.cgi?id=1495043
bugzilla.redhat.com/show_bug.cgi?id=1524104
bugzilla.redhat.com/show_bug.cgi?id=1524107
bugzilla.redhat.com/show_bug.cgi?id=1524116
bugzilla.redhat.com/show_bug.cgi?id=1525055
bugzilla.redhat.com/show_bug.cgi?id=1537353
bugzilla.redhat.com/show_bug.cgi?id=1545237
bugzilla.redhat.com/show_bug.cgi?id=1561213
bugzilla.redhat.com/show_bug.cgi?id=1561217
bugzilla.redhat.com/show_bug.cgi?id=1566260
security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2101.json
access.redhat.com/security/cve/CVE-2017-17724
cve.org/CVERecord?id=CVE-2017-17724
nvd.nist.gov/vuln/detail/CVE-2017-17724
access.redhat.com/security/cve/CVE-2018-4868
cve.org/CVERecord?id=CVE-2018-4868
nvd.nist.gov/vuln/detail/CVE-2018-4868
access.redhat.com/security/cve/CVE-2018-8976
cve.org/CVERecord?id=CVE-2018-8976
nvd.nist.gov/vuln/detail/CVE-2018-8976
access.redhat.com/security/cve/CVE-2018-8977
cve.org/CVERecord?id=CVE-2018-8977
nvd.nist.gov/vuln/detail/CVE-2018-8977
access.redhat.com/security/cve/CVE-2018-9305
cve.org/CVERecord?id=CVE-2018-9305
nvd.nist.gov/vuln/detail/CVE-2018-9305
access.redhat.com/security/cve/CVE-2018-10772
cve.org/CVERecord?id=CVE-2018-10772
nvd.nist.gov/vuln/detail/CVE-2018-10772
access.redhat.com/security/cve/CVE-2018-10958
cve.org/CVERecord?id=CVE-2018-10958
nvd.nist.gov/vuln/detail/CVE-2018-10958
access.redhat.com/security/cve/CVE-2018-10998
cve.org/CVERecord?id=CVE-2018-10998
nvd.nist.gov/vuln/detail/CVE-2018-10998
access.redhat.com/security/cve/CVE-2018-10999
cve.org/CVERecord?id=CVE-2018-10999
nvd.nist.gov/vuln/detail/CVE-2018-10999
access.redhat.com/security/cve/CVE-2018-11037
cve.org/CVERecord?id=CVE-2018-11037
nvd.nist.gov/vuln/detail/CVE-2018-11037
access.redhat.com/security/cve/CVE-2018-12264
cve.org/CVERecord?id=CVE-2018-12264
nvd.nist.gov/vuln/detail/CVE-2018-12264
access.redhat.com/security/cve/CVE-2018-12265
cve.org/CVERecord?id=CVE-2018-12265
nvd.nist.gov/vuln/detail/CVE-2018-12265
access.redhat.com/security/cve/CVE-2018-14046
cve.org/CVERecord?id=CVE-2018-14046
nvd.nist.gov/vuln/detail/CVE-2018-14046
access.redhat.com/security/cve/CVE-2018-17282
cve.org/CVERecord?id=CVE-2018-17282
nvd.nist.gov/vuln/detail/CVE-2018-17282
access.redhat.com/security/cve/CVE-2018-17581
cve.org/CVERecord?id=CVE-2018-17581
nvd.nist.gov/vuln/detail/CVE-2018-17581
access.redhat.com/security/cve/CVE-2018-18915
cve.org/CVERecord?id=CVE-2018-18915
access.redhat.com/security/cve/CVE-2018-19107
cve.org/CVERecord?id=CVE-2018-19107
nvd.nist.gov/vuln/detail/CVE-2018-19107
access.redhat.com/security/cve/CVE-2018-19108
cve.org/CVERecord?id=CVE-2018-19108
nvd.nist.gov/vuln/detail/CVE-2018-19108
access.redhat.com/security/cve/CVE-2018-19535
cve.org/CVERecord?id=CVE-2018-19535
nvd.nist.gov/vuln/detail/CVE-2018-19535
access.redhat.com/security/cve/CVE-2018-19607
cve.org/CVERecord?id=CVE-2018-19607
nvd.nist.gov/vuln/detail/CVE-2018-19607
access.redhat.com/security/cve/CVE-2018-20096
cve.org/CVERecord?id=CVE-2018-20096
nvd.nist.gov/vuln/detail/CVE-2018-20096
access.redhat.com/security/cve/CVE-2018-20097
cve.org/CVERecord?id=CVE-2018-20097
nvd.nist.gov/vuln/detail/CVE-2018-20097
access.redhat.com/security/cve/CVE-2018-20098
cve.org/CVERecord?id=CVE-2018-20098
nvd.nist.gov/vuln/detail/CVE-2018-20098
access.redhat.com/security/cve/CVE-2018-20099
cve.org/CVERecord?id=CVE-2018-20099
nvd.nist.gov/vuln/detail/CVE-2018-20099
access.redhat.com/security/cve/CVE-2019-9143
cve.org/CVERecord?id=CVE-2019-9143
nvd.nist.gov/vuln/detail/CVE-2019-9143
access.redhat.com/errata/RHSA-2020:1577
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1577.json
access.redhat.com/security/cve/CVE-2017-18005
cve.org/CVERecord?id=CVE-2017-18005
nvd.nist.gov/vuln/detail/CVE-2017-18005
access.redhat.com/security/cve/CVE-2018-9303
cve.org/CVERecord?id=CVE-2018-9303
nvd.nist.gov/vuln/detail/CVE-2018-9303
access.redhat.com/security/cve/CVE-2018-9304
cve.org/CVERecord?id=CVE-2018-9304
nvd.nist.gov/vuln/detail/CVE-2018-9304
access.redhat.com/security/cve/CVE-2018-9306
cve.org/CVERecord?id=CVE-2018-9306
nvd.nist.gov/vuln/detail/CVE-2018-9306
cve.org/CVERecord?id=CVE-2018-14338
nvd.nist.gov/vuln/detail/CVE-2018-14338
cve.org/CVERecord?id=CVE-2018-17229
nvd.nist.gov/vuln/detail/CVE-2018-17229
cve.org/CVERecord?id=CVE-2018-17230
nvd.nist.gov/vuln/detail/CVE-2018-17230
cve.org/CVERecord?id=CVE-2019-13109
nvd.nist.gov/vuln/detail/CVE-2019-13109
nvd.nist.gov/vuln/detail/CVE-2019-13111
errata.rockylinux.org/RLSA-2020:1577
suse.com/support/update/announcement/2022/suse-su-20223598-1
bugzilla.suse.com/1076579
bugzilla.suse.com/1086798
bugzilla.suse.com/1086810
bugzilla.suse.com/1092096
bugzilla.suse.com/1114690
bugzilla.suse.com/1185447
bugzilla.suse.com/1186192
bugzilla.suse.com/1188733
bugzilla.suse.com/1188756
bugzilla.suse.com/1189330
bugzilla.suse.com/1189331
bugzilla.suse.com/1189332
bugzilla.suse.com/1189333
bugzilla.suse.com/1189636
bugzilla.suse.com/1189780
suse.com/security/cve/CVE-2018-10772
suse.com/security/cve/CVE-2018-18915
suse.com/security/cve/CVE-2018-5772
suse.com/security/cve/CVE-2018-8976
suse.com/security/cve/CVE-2018-8977
suse.com/security/cve/CVE-2020-18898
suse.com/security/cve/CVE-2020-18899
suse.com/security/cve/CVE-2021-29470
suse.com/security/cve/CVE-2021-31291
suse.com/security/cve/CVE-2021-31292
suse.com/security/cve/CVE-2021-32617
suse.com/security/cve/CVE-2021-37618
suse.com/security/cve/CVE-2021-37619
suse.com/security/cve/CVE-2021-37620
suse.com/security/cve/CVE-2021-37621
Left out here: 59 references. The JSON record has them.