CVE-2020-18899
1 advisory.
PyPI/exiv2 CVE-2020-18899: medium 6.5
An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2021-879
- https://github.com/Exiv2/exiv2/issues/742
- https://cwe.mitre.org/data/definitions/789.html
- https://security.gentoo.org/glsa/202312-06
CVE-2020-18899 · published · modified · JSON