Log in Start free

Vulnerability · Published May 17, 2021 · Assigned by GitHub_M

CVE-2021-32617Denial of service in Exiv2

Medium 4.7

In plain English

A medium-severity uncontrolled resource consumption in exiv2 from Exiv2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.7Medium
Exploit odds (30 days)1.2%top 32.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient algorithm (quadratic complexity) was found in Exiv2 versions v0.27.3 and earlier. The inefficient algorithm is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.4. Note that this bug is only triggered when _writing_ the metadata, which is a less frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `rm`.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8exiv20.27.4-5.el8ALSA-2021:4173
AlmaLinux:8exiv2-devel0.27.4-5.el8ALSA-2021:4173
AlmaLinux:8exiv2-doc0.27.4-5.el8ALSA-2021:4173
AlmaLinux:8exiv2-libs0.27.4-5.el8ALSA-2021:4173
Alpine:v3.20exiv20.27.3-r2ALPINE-CVE-2021-32617
Alpine:v3.21exiv20.27.3-r2ALPINE-CVE-2021-32617
Alpine:v3.22exiv20.27.3-r2ALPINE-CVE-2021-32617
Alpine:v3.23exiv20.27.3-r2ALPINE-CVE-2021-32617
Alpine:v3.24exiv20.27.3-r2ALPINE-CVE-2021-32617
Debian:12exiv20.27.5-1DEBIAN-CVE-2021-32617
Debian:13exiv20.27.5-1DEBIAN-CVE-2021-32617
Debian:14exiv20.27.5-1DEBIAN-CVE-2021-32617
Rocky Linux:8exiv20:0.27.4-5.el8RLSA-2021:4173

Affected products (as reported)

VendorProductVersions
Exiv2 exiv2 <= 0.27.3

Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

References