CVE-2017-17724 - log back

CVE-2017-17724 created at 25 Sep 2019 19:31:40
Severity
+ Low
Remote
+ Local
Type
+ Denial of service
Description
+ In Exiv2 0.26, there is a heap-based buffer over-read in the Exiv2::IptcData::printStructure function in iptc.cpp. Remote attackers can exploit this vulnerability to cause a denial of service via a crafted TIFF file.
References
+ https://bugzilla.redhat.com/show_bug.cgi?id=1524107
+ https://github.com/Exiv2/exiv2/issues/210
Notes