CVE-2020-18771 - Vulnerability Details - OpenCVE

ReportizFlow

Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact Partial

AV:N/AC:M/Au:N/C:P/I:N/A:P

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Debian	Debian Linux
Exiv2	Exiv2

Configuration 1 [-]

cpe:2.3:a:exiv2:exiv2:0.27.99.0:*:*:*:*:*:*:*

Configuration 2 [-]

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://cwe.mitre.org/data/definitions/126.html
https://github.com/Exiv2/exiv2/issues/756
https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html
https://nvd.nist.gov/vuln/detail/CVE-2020-18771
https://security.gentoo.org/glsa/202312-06
https://www.cve.org/CVERecord?id=CVE-2020-18771

History

Mon, 18 Nov 2024 22:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-08-23T00:00:00

Updated: 2024-11-18T21:43:21.259Z

Reserved: 2020-08-13T00:00:00

Link: CVE-2020-18771

Vulnrichment

Updated: 2024-08-04T14:08:30.386Z

NVD

Status : Modified

Published: 2021-08-23T22:15:26.150

Modified: 2024-11-21T05:08:48.397

Link: CVE-2020-18771

Redhat

Severity : Low

Publid Date: 2019-03-25T00:00:00Z

Links: CVE-2020-18771 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2020-18771", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-11-18T21:43:21.259Z", "dateReserved": "2020-08-13T00:00:00", "datePublished": "2021-08-23T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-12-22T10:06:40.541228"}, "descriptions": [{"lang": "en", "value": "Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/Exiv2/exiv2/issues/756"}, {"url": "https://cwe.mitre.org/data/definitions/126.html"}, {"name": "[debian-lts-announce] 20230110 [SECURITY] [DLA 3265-1] exiv2 security update", "tags": ["mailing-list"], "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html"}, {"name": "GLSA-202312-06", "tags": ["vendor-advisory"], "url": "https://security.gentoo.org/glsa/202312-06"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T14:08:30.386Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/Exiv2/exiv2/issues/756", "tags": ["x_transferred"]}, {"url": "https://cwe.mitre.org/data/definitions/126.html", "tags": ["x_transferred"]}, {"name": "[debian-lts-announce] 20230110 [SECURITY] [DLA 3265-1] exiv2 security update", "tags": ["mailing-list", "x_transferred"], "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html"}, {"name": "GLSA-202312-06", "tags": ["vendor-advisory", "x_transferred"], "url": "https://security.gentoo.org/glsa/202312-06"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-01-03T19:32:41.680250Z", "id": "CVE-2020-18771", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T21:43:21.259Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/Exiv2/exiv2/issues/756", "tags": ["x_transferred"]}, {"url": "https://cwe.mitre.org/data/definitions/126.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html", "name": "[debian-lts-announce] 20230110 [SECURITY] [DLA 3265-1] exiv2 security update", "tags": ["mailing-list", "x_transferred"]}, {"url": "https://security.gentoo.org/glsa/202312-06", "name": "GLSA-202312-06", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T14:08:30.386Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2020-18771", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-01-03T19:32:41.680250Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T21:43:16.095Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/Exiv2/exiv2/issues/756"}, {"url": "https://cwe.mitre.org/data/definitions/126.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html", "name": "[debian-lts-announce] 20230110 [SECURITY] [DLA 3265-1] exiv2 security update", "tags": ["mailing-list"]}, {"url": "https://security.gentoo.org/glsa/202312-06", "name": "GLSA-202312-06", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-12-22T10:06:40.541228"}}}, "cveMetadata": {"cveId": "CVE-2020-18771", "state": "PUBLISHED", "dateUpdated": "2024-11-18T21:43:21.259Z", "dateReserved": "2020-08-13T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2021-08-23T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:exiv2:exiv2:0.27.99.0:*:*:*:*:*:*:*", "matchCriteriaId": "B5688A15-F378-451E-9D5B-44082AC687E3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Exiv2 0.27.99.0 has a global buffer over-read in Exiv2::Internal::Nikon1MakerNote::print0x0088 in nikonmn_int.cpp which can result in an information leak."}, {"lang": "es", "value": "Exiv2 versi\u00f3n 0.27.99.0, presenta una lectura excesiva del b\u00fafer global en la funci\u00f3n Exiv2::Internal::Nikon1MakerNote::print0x0088 en el archivo nikonmn_int.cpp que puede resultar en un filtrado de informaci\u00f3n."}], "id": "CVE-2020-18771", "lastModified": "2024-11-21T05:08:48.397", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "[email protected]", "type": "Primary"}]}, "published": "2021-08-23T22:15:26.150", "references": [{"source": "[email protected]", "tags": ["Technical Description", "Third Party Advisory"], "url": "https://cwe.mitre.org/data/definitions/126.html"}, {"source": "[email protected]", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/Exiv2/exiv2/issues/756"}, {"source": "[email protected]", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html"}, {"source": "[email protected]", "url": "https://security.gentoo.org/glsa/202312-06"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Technical Description", "Third Party Advisory"], "url": "https://cwe.mitre.org/data/definitions/126.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking", "Third Party Advisory"], "url": "https://github.com/Exiv2/exiv2/issues/756"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/202312-06"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Primary"}]}