Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

SUSE-SU-2022:4276-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2022:4276-1

UNKNOWN

Security update for exiv2

Published Nov 29, 2022

Modified 3 years ago

Fix available

Details

This update for exiv2 fixes the following issues:

CVE-2019-13110: Fixed an integer-overflow and out-of-bounds read in CiffDirectory:readDirectory leads to denail of service (bsc#1142678).
CVE-2019-13109: Fixed a denial of service in PngImage:readMetadata (bsc#1142677).
CVE-2018-17581: Fixed an excessive stack consumption CiffDirectory:readDirectory() at crwimage_int.cpp (bsc#1110282).
CVE-2017-11591: Fixed a floating point exception in Exiv2::ValueType (bsc#1050257).
CVE-2019-17402: Fixed an improper validation of the total size to the offset and size leads to a crash in Exiv2::getULong in types.cpp (bsc#1153577).
CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).
CVE-2018-20098: Fixed a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header (bsc#1119560).
CVE-2018-11531: Fixed a heap-based buffer overflow in getData in preview.cpp (bsc#1095070).
CVE-2018-20099: exiv2: infinite loop in Exiv2::Jp2Image::encodeJp2Header (bsc#1119559).

Affected Packages

SUSE:Enterprise Storage 6exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Enterprise Storage 6libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Enterprise Storage 6libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Enterprise Storage 7exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Enterprise Storage 7libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Enterprise Storage 7libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-ESPOSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise High Performance Computing 15-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Module for Desktop Applications 15 SP3libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-BCLexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-BCLlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP1-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-BCLexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-BCLlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-BCLlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15 SP2-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15-LTSSexiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15-LTSSlibexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server 15-LTSSlibexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP1libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Proxy 4.1exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Proxy 4.1libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Proxy 4.1libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Retail Branch Server 4.1exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Retail Branch Server 4.1libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Retail Branch Server 4.1libexiv2-devel

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Server 4.1exiv2

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Server 4.1libexiv2-26

Fixed in:

0.26-150000.6.26.1

SUSE:Manager Server 4.1libexiv2-devel

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3exiv2

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3exiv2-lang

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3libexiv2-26

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3libexiv2-26-32bit

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3libexiv2-devel

Fixed in:

0.26-150000.6.26.1

openSUSE:Leap 15.3libexiv2-doc

Fixed in:

0.26-150000.6.26.1

References

REPORThttps://bugzilla.suse.com/1050257 REPORThttps://bugzilla.suse.com/1095070 REPORThttps://bugzilla.suse.com/1110282 REPORThttps://bugzilla.suse.com/1119559 REPORThttps://bugzilla.suse.com/1119560 REPORThttps://bugzilla.suse.com/1119562 REPORThttps://bugzilla.suse.com/1142677 REPORThttps://bugzilla.suse.com/1142678 REPORThttps://bugzilla.suse.com/1153577 REPORThttps://bugzilla.suse.com/1186231 REPORThttps://bugzilla.suse.com/1189337 WEBhttps://www.suse.com/security/cve/CVE-2017-11591 WEBhttps://www.suse.com/security/cve/CVE-2018-11531 WEBhttps://www.suse.com/security/cve/CVE-2018-17581 WEBhttps://www.suse.com/security/cve/CVE-2018-20097 WEBhttps://www.suse.com/security/cve/CVE-2018-20098 WEBhttps://www.suse.com/security/cve/CVE-2018-20099 WEBhttps://www.suse.com/security/cve/CVE-2019-13109 WEBhttps://www.suse.com/security/cve/CVE-2019-13110 WEBhttps://www.suse.com/security/cve/CVE-2019-17402 WEBhttps://www.suse.com/security/cve/CVE-2021-29473 WEBhttps://www.suse.com/security/cve/CVE-2021-32815 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20224276-1/

Upstream

CVE-2017-11591 CVE-2018-11531 CVE-2018-17581 CVE-2018-20097 CVE-2018-20098 CVE-2018-20099 CVE-2019-13109 CVE-2019-13110 CVE-2019-17402 CVE-2021-29473 CVE-2021-32815

Related

CVE-2017-11591 CVE-2018-11531 CVE-2018-17581 CVE-2018-20097 CVE-2018-20098 CVE-2018-20099 CVE-2019-13109 CVE-2019-13110 CVE-2019-17402 CVE-2021-29473 CVE-2021-32815

Ecosystems

SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Server 15 SP1-BCL SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-BCL SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Manager Proxy 4.1 SUSE Manager Retail Branch Server 4.1 SUSE Manager Server 4.1 openSUSE Leap 15.3

Timeline

PublishedNov 29, 2022

ModifiedNov 29, 2022