CVE-2021-34334
Medium
Description
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.5.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Exiv2
PublishedAug 9, 2021
First seenAug 9, 2021
Weakness typeCWE-835CWE-835
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exiv2 exiv2 | v ≤ 0.27.4 | — |
| fedoraproject fedora | 33, 34 | — |
| debian debian_linux | 10.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.