CVE-2018-20099 Denial of service in n/a

Medium 6.5 Published 12 Dec 2018 Updated 5 Aug 2024

A crafted input triggers an infinite loop in Exiv2, allowing remote attackers to cause a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2018-20099?

CVE-2018-20099 is a medium-severity denial of service vulnerability in Exiv2 Exiv2, published on 12 Dec 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.

Weakness: CWE-835

Which versions are affected by CVE-2018-20099?

1 open source package ship an affected version, including exiv2. It affects 1 product.

Package	Affected	Fixed in
`exiv2` PyPI	All versions	None

Products include Exiv2 Exiv2.

How do I fix CVE-2018-20099?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-20099 being exploited?

There is no known exploitation of CVE-2018-20099 in the wild and no public exploit code.

All Exiv2 Exiv2 vulnerabilities

Sources

Also known as GHSA-wr4g-wr5g-w9c8, PYSEC-2018-120.