[Buildroot] [PATCH 3/3] package/exiv2: fix CVE-2019-20421
peter at korsgaard.com
Sat Mar 14 17:58:53 UTC 2020
>>>>> "Fabrice" == Fabrice Fontaine <fontaine.fabrice at gmail.com> writes:
> In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input
> file can result in an infinite loop and hang, with high CPU consumption.
> Remote attackers could leverage this vulnerability to cause a denial of
> service via a crafted file.
> Signed-off-by: Fabrice Fontaine <fontaine.fabrice at gmail.com>
Committed to 2019.02.x and 2019.11.x, thanks.
Bye, Peter Korsgaard
More information about the buildroot