CVE-2024-39695 - Vulnerability Details - OpenCVE

ReportizFlow

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Exiv2	Exiv2

Configuration 1 [-]

cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387
https://github.com/Exiv2/exiv2/pull/3006
https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh
https://nvd.nist.gov/vuln/detail/CVE-2024-39695
https://www.cve.org/CVERecord?id=CVE-2024-39695

History

Sat, 19 Oct 2024 02:30:00 +0000

Type	Values Removed	Values Added
References		https://nvd.nist.gov/vuln/detail/CVE-2024-39695 https://www.cve.org/CVERecord?id=CVE-2024-39695
Metrics	threat_severity `None`	threat_severity `Moderate`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-07-08T15:14:27.639Z

Updated: 2024-08-02T04:26:15.941Z

Reserved: 2024-06-27T18:44:13.037Z

Link: CVE-2024-39695

Vulnrichment

Updated: 2024-08-02T04:26:15.941Z

NVD

Status : Modified

Published: 2024-07-08T16:15:08.700

Modified: 2024-11-21T09:28:14.270

Link: CVE-2024-39695

Redhat

Severity : Moderate

Publid Date: 2024-07-08T00:00:00Z

Links: CVE-2024-39695 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-39695", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-06-27T18:44:13.037Z", "datePublished": "2024-07-08T15:14:27.639Z", "dateUpdated": "2024-08-02T04:26:15.941Z"}, "containers": {"cna": {"title": "Exiv2 has an out-of-bounds read in AsfVideo::streamProperties", "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "lang": "en", "description": "CWE-125: Out-of-bounds Read", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh"}, {"name": "https://github.com/Exiv2/exiv2/pull/3006", "tags": ["x_refsource_MISC"], "url": "https://github.com/Exiv2/exiv2/pull/3006"}, {"name": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "tags": ["x_refsource_MISC"], "url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387"}], "affected": [{"vendor": "Exiv2", "product": "exiv2", "versions": [{"version": ">= 0.28.0, < 0.28.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-07-08T15:14:27.639Z"}, "descriptions": [{"lang": "en", "value": "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3."}], "source": {"advisory": "GHSA-38rv-8x93-pvrh", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "exiv2", "product": "exiv2", "cpes": ["cpe:2.3:a:exiv2:exiv2:0.28.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0.28.0", "status": "affected", "lessThan": "0.28.3", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-08T20:00:33.240459Z", "id": "CVE-2024-39695", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-08T20:01:52.650Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:15.941Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh"}, {"name": "https://github.com/Exiv2/exiv2/pull/3006", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/Exiv2/exiv2/pull/3006"}, {"name": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://github.com/Exiv2/exiv2/pull/3006", "name": "https://github.com/Exiv2/exiv2/pull/3006", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "name": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:15.941Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39695", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-08T20:00:33.240459Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:exiv2:exiv2:0.28.0:*:*:*:*:*:*:*"], "vendor": "exiv2", "product": "exiv2", "versions": [{"status": "affected", "version": "0.28.0", "lessThan": "0.28.3", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-08T20:01:47.144Z"}}], "cna": {"title": "Exiv2 has an out-of-bounds read in AsfVideo::streamProperties", "source": {"advisory": "GHSA-38rv-8x93-pvrh", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Exiv2", "product": "exiv2", "versions": [{"status": "affected", "version": ">= 0.28.0, < 0.28.3"}]}], "references": [{"url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "name": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Exiv2/exiv2/pull/3006", "name": "https://github.com/Exiv2/exiv2/pull/3006", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "name": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125: Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-07-08T15:14:27.639Z"}}}, "cveMetadata": {"cveId": "CVE-2024-39695", "state": "PUBLISHED", "dateUpdated": "2024-08-02T04:26:15.941Z", "dateReserved": "2024-06-27T18:44:13.037Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-07-08T15:14:27.639Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*", "matchCriteriaId": "E1304EB2-11F0-41A7-A09E-75EC5F40340C", "versionEndExcluding": "0.28.3", "versionStartIncluding": "0.28.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3."}, {"lang": "es", "value": "Exiv2 es una utilidad de l\u00ednea de comandos y una librer\u00eda de C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen. Se encontr\u00f3 una lectura fuera de los l\u00edmites en la versi\u00f3n v0.28.2 de Exiv2. La vulnerabilidad est\u00e1 en el analizador del formato de v\u00eddeo ASF, que era una caracter\u00edstica nueva en la versi\u00f3n 0.28.0. La lectura fuera de los l\u00edmites se activa cuando se utiliza Exiv2 para leer los metadatos de un archivo de v\u00eddeo creado. El error se solucion\u00f3 en la versi\u00f3n v0.28.3."}], "id": "CVE-2024-39695", "lastModified": "2024-11-21T09:28:14.270", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 2.5, "source": "[email protected]", "type": "Primary"}]}, "published": "2024-07-08T16:15:08.700", "references": [{"source": "[email protected]", "tags": ["Patch"], "url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387"}, {"source": "[email protected]", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/Exiv2/exiv2/pull/3006"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/Exiv2/exiv2/pull/3006"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Primary"}]}

{"bugzilla": {"description": "exiv2: Out-of-bounds read in AsfVideo::streamProperties", "id": "2296343", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2296343"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L", "status": "draft"}, "cwe": "CWE-125", "details": ["Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 version v0.28.2. The vulnerability is in the parser for the ASF video format, which was a new feature in v0.28.0. The out-of-bounds read is triggered when Exiv2 is used to read the metadata of a crafted video file. The bug is fixed in version v0.28.3.", "A flaw was found in the Exiv2 library. An out-of-bounds read can be triggered when the metadata of a specially crafted ASF video file is processed, causing the application linked to the library to crash, resulting in a denial of service."], "name": "CVE-2024-39695", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "compat-exiv2-023", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "compat-exiv2-026", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "exiv2", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "compat-exiv2-026", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "exiv2", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "exiv2", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-07-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-39695\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-39695\nhttps://github.com/Exiv2/exiv2/commit/3a28346db5ae1735a8728fe3491b0aecc1dbf387\nhttps://github.com/Exiv2/exiv2/pull/3006\nhttps://github.com/Exiv2/exiv2/security/advisories/GHSA-38rv-8x93-pvrh"], "statement": "The support for the ASF video format was introduced in Exiv2 version 0.28.0. This Exiv2 version is not shipped in any Red Hat product. Therefore, Exiv2 as shipped in Red Hat Enterprise Linux 7, 8, and 9 is not affected by this vulnerability.", "threat_severity": "Moderate"}