Homepage

Loop with Unreachable Exit Condition ('Infinite Loop') The advisory has been revoked - it doesn't affect any version of package compat-exiv2-026-debugsource  (opens in a new tab)

Threat Intelligence

EPSS
1.11% (64th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS8-COMPATEXIV2026DEBUGSOURCE-1962871
  • published21 Aug 2021
  • disclosed8 Aug 2021
Report a new vulnerability Found a mistake?

Introduced: 8 Aug 2021

CVE-2021-34334  (opens in a new tab)
CWE-835  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:8.

NVD Description

Note: Versions mentioned in the description apply only to the upstream compat-exiv2-026-debugsource package and not the compat-exiv2-026-debugsource package as distributed by Centos.

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running Exiv2 on a crafted image file. The bug is fixed in version v0.27.5.

References