CVE-2020-18898 Denial of service in n/a
Remote attackers can cause a denial of service in applications using Exiv2 by providing a crafted file that triggers stack exhaustion.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2020-18898?
CVE-2020-18898 is a medium-severity denial of service vulnerability in Exiv2 Exiv2, published on 19 Aug 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file.
Weakness: CWE-674
Which versions are affected by CVE-2020-18898?
It affects 1 product.
Linux distribution packages (20)
compat-exiv2-026 AlmaLinux:8 | All versions | 0.26-7.el8 |
exiv2 AlmaLinux:8 | All versions | 0.27.5-2.el8 |
exiv2-devel AlmaLinux:8 | All versions | 0.27.5-2.el8 |
exiv2-doc AlmaLinux:8 | All versions | 0.27.5-2.el8 |
exiv2-libs AlmaLinux:8 | All versions | 0.27.5-2.el8 |
compat-exiv2-026 Red Hat:enterprise_linux:8::appstream | All versions | 0:0.26-7.el8 |
compat-exiv2-026-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:0.26-7.el8 |
compat-exiv2-026-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:0.26-7.el8 |
exiv2 Red Hat:enterprise_linux:8::appstream | All versions | 0:0.27.5-2.el8 |
exiv2-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:0.27.5-2.el8 |
exiv2-debugsource Red Hat:enterprise_linux:8::appstream | All versions | 0:0.27.5-2.el8 |
exiv2-libs Red Hat:enterprise_linux:8::appstream | All versions | 0:0.27.5-2.el8 |
exiv2-libs-debuginfo Red Hat:enterprise_linux:8::appstream | All versions | 0:0.27.5-2.el8 |
exiv2-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.27.5-2.el8 |
exiv2-debugsource Red Hat:enterprise_linux:8::crb | All versions | 0:0.27.5-2.el8 |
exiv2-devel Red Hat:enterprise_linux:8::crb | All versions | 0:0.27.5-2.el8 |
exiv2-doc Red Hat:enterprise_linux:8::crb | All versions | 0:0.27.5-2.el8 |
exiv2-libs-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 0:0.27.5-2.el8 |
compat-exiv2-026 Rocky Linux:8 | All versions | 0:0.26-7.el8 |
exiv2 Rocky Linux:8 | All versions | 0:0.27.5-2.el8 |
Products include Exiv2 Exiv2.
How do I fix CVE-2020-18898?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-18898 being exploited?
There is no known exploitation of CVE-2020-18898 in the wild and no public exploit code.
Other vulnerabilities in Exiv2 Exiv2
Sources
Also known as ALSA-2022:1797, ALSA-2022:1842, DEBIAN-CVE-2020-18898, GHSA-g97p-564p-26xp, RHSA-2022:1797, RHSA-2022:1842 and 2 more.