Ubuntu update for exiv2



Risk Medium
Patch available YES
Number of vulnerabilities 11
CVE-ID CVE-2021-32815
CVE-2021-34334
CVE-2021-37620
CVE-2021-37622
CVE-2021-34335
CVE-2021-37615
CVE-2021-37616
CVE-2021-37618
CVE-2021-37619
CVE-2021-37621
CVE-2021-37623
CWE-ID CWE-617
CWE-835
CWE-125
CWE-369
CWE-476
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Ubuntu
Operating systems & Components / Operating system

libexiv2-27 (Ubuntu package)
Operating systems & Components / Operating system package or component

libexiv2-14 (Ubuntu package)
Operating systems & Components / Operating system package or component

Vendor Canonical Ltd.

Security Bulletin

This security bulletin contains information about 11 vulnerabilities.

1) Reachable Assertion

EUVDB-ID: #VU69648

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-32815

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion when handling metadata of image files. A remote attacker can pass a specially crafted image to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Infinite loop

EUVDB-ID: #VU69649

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-34334

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop when processing metadata of image files. A remote attacker can pass a specially crafted image to the application, consume all available system resources and cause denial of service conditions.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU69650

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37620

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition when processing metadata of a crafted image file. A remote attacker can pass a specially crafted image file to the application, trigger an out-of-bounds read error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Infinite loop

EUVDB-ID: #VU84719

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37622

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in JpegBase::printStructure(). A remote attacker can consume all available system resources and cause denial of service conditions.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Division by zero

EUVDB-ID: #VU84713

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-34335

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to divide by zero error in Exiv2::Internal::resolveLens0xffff(). A remote attacker can pass specially crafted file to the application and crash it.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) NULL pointer dereference

EUVDB-ID: #VU84714

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37615

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in Exiv2::Internal::resolveLens0x319(). A remote attacker can pass specially crafted file to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU84715

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37616

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in Exiv2::Internal::resolveLens0x8ff(). A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Out-of-bounds read

EUVDB-ID: #VU84716

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37618

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in Exiv2::Jp2Image::printStructure(). A remote attacker can pass a specially crafted file to the application, trigger an out-of-bounds read error and perform a denial of service attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Out-of-bounds read

EUVDB-ID: #VU84717

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37619

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in Exiv2::Jp2Image::encodeJp2Header(). A remote attacker can pass a specially crafted file to the application, trigger an out-of-bounds read error and perform a denial of service attack.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Infinite loop

EUVDB-ID: #VU84718

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37621

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in Image::printIFDStructure(). A remote attacker can consume all available system resources and cause denial of service conditions.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Infinite loop

EUVDB-ID: #VU84720

Risk: Medium

CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-37623

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop in JpegBase::printStructure. A remote attacker can consume all available system resources and cause denial of service conditions.

Mitigation

Update the affected package exiv2 to the latest version.

Vulnerable software versions

Ubuntu: 16.04 - 21.04

libexiv2-27 (Ubuntu package): before 0.27.2-8ubuntu2.6

libexiv2-14 (Ubuntu package): before 0.25-3.1ubuntu0.18.04.11

CPE2.3 External links

https://ubuntu.com/security/notices/USN-5043-1


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###