CVE-2017-11683

Medium

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a…

mitre·CWE-617·Published 2017-07-27

CVSS

6.5

EPSS

0.03

KEV

No

Exploits

0

Vendor statements (1)

usn.ubuntu.com

cve.orgen

187 chars

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.

NVDen

187 chars

There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of service attack via crafted input.

NVDes

223 chars

Hay una aserción alcanzable en la función Internal::TiffReader::visitDirectory en el archivo tiffvisitor.cpp de Exiv2 versión 0.26 que conllevará a un ataque de denegación de servicio remoto por medio de una entrada creada.

CVSS metrics across sources

2

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H