CVE-2021-31292

7.5

HIGHCVSS v3

Published

July 26, 2021

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata.

Exiv2/exiv2

GitHubImage metadata library and tools

= 0.27.3NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 33, = 34NVD

fedora

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 33, = 34NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 33, = 34NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 33, = 34NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 33, = 34NVD

Security Advisories

CVE-2021-31292

Description

More on this CVE