Exiv2 CVE-2017-17669 Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	102265
Class:	Boundary Condition Error
CVE:	CVE-2017-17669
Remote:	Yes
Local:	No
Published:	Dec 13 2017 12:00AM
Updated:	Dec 13 2017 12:00AM
Credit:	Young_X@VARAS, IIE
Vulnerable:	Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 Exiv2 Exiv2 0.26
Not Vulnerable:

Exiv2 CVE-2017-17669 Heap Based Buffer Overflow Vulnerability

Exiv2 is prone to a heap-based buffer-overflow vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition. Due to the nature of this issue, code execution may be possible but this has not been confirmed.

Exiv2 0.26 is vulnerable; other versions may also be affected.

Exiv2 CVE-2017-17669 Heap Based Buffer Overflow Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Exiv2 CVE-2017-17669 Heap Based Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Exiv2 CVE-2017-17669 Heap Based Buffer Overflow Vulnerability

References:

• heap-buffer-overflow in Exiv2::Internal::PngChunk::keyTXTChunk #187 (Exiv2)
  
• Exiv2 Homepage (exiv2)
  
• Bug 1526052 - (CVE-2017-17669) CVE-2017-17669 exiv2: Heap-based buffer over-rea (Redhat)
  
• CVE-2017-17669 (Redhat)