Exiv2 'tiffvisitor.cpp' Remote Denial of Service Vulnerability

Bugtraq ID:	100030
Class:	Boundary Condition Error
CVE:	CVE-2017-11683
Remote:	Yes
Local:	No
Published:	Jul 27 2017 12:00AM
Updated:	Jul 27 2017 12:00AM
Credit:	owl337
Vulnerable:	Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Exiv2 Exiv2 0.26
Not Vulnerable:

Exiv2 'tiffvisitor.cpp' Remote Denial of Service Vulnerability

Exiv2 is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition, denying service to legitimate users.

Exiv2 0.26 is vulnerable.

Exiv2 'tiffvisitor.cpp' Remote Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Exiv2 'tiffvisitor.cpp' Remote Denial of Service Vulnerability

References:

• Bug 1475124 - There is an assertion aborted in tiffvisitor.cpp of exiv2/libexiv2 (Red Hat)
  
• Bug 1475754 - (CVE-2017-11683) CVE-2017-11683 exiv2: Reachable assertion in the (Red Hat)
  
• CVE-2017-11683 (Red Hat)
  
• Exiv2 Homepage (exiv2)