NetSight
IP …
medium6.5

CVE-2019-13114

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted res…

Impact

http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.

Affected products

VendorProductAffected versions
Exiv2Exiv2
through 0.27.1
FedoraprojectFedora
Version 30
DebianDebian Linux
Version 10.0
CanonicalUbuntu Linux
Versions 16.04, 18.04, 18.10, 19.04

Weakness classification

CWE-476

References