Total vulnerabilities in the database
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
| Software | From | Fixed in |
|---|---|---|
| exiv2 / exiv2 | - | 0.27.1.x |
| fedoraproject / fedora | 30 | 30.x |
| debian / debian_linux | 10.0 | 10.0.x |
| canonical / ubuntu_linux | 18.04 | 18.04.x |
| canonical / ubuntu_linux | 18.10 | 18.10.x |
| canonical / ubuntu_linux | 19.04 | 19.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |