NetSight
high7.5

CVE-2017-9953

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26.

Impact

There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.

Affected products

VendorProductAffected versions
Exiv2Exiv2
Version 0.26
RedhatEnterprise Linux
Version 7.0

Weakness classification

References