CVE-2017-17723 - log back

CVE-2017-17723 created at 25 Sep 2019 19:31:40
Severity
+ Low
Remote
+ Local
Type
+ Denial of service
Description
+ In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::Image::byteSwap4 function in image.cpp. Remote attackers can exploit this vulnerability to disclose memory data or cause a denial of service via a crafted TIFF file.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=1524104
+ https://github.com/Exiv2/exiv2/issues/229
Notes