Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GHSA-4v6p-cxf9-98rf] Allocation of Resources Without Limits or Throttling in metadata-extractor #4727

Merged
merged 1 commit into from
Aug 26, 2024
Merged

[GHSA-4v6p-cxf9-98rf] Allocation of Resources Without Limits or Throttling in metadata-extractor #4727

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 7 additions & 4 deletions advisories/github-reviewed/2022/02/GHSA-4v6p-cxf9-98rf/GHSA-4v6p-cxf9-98rf.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4v6p-cxf9-98rf",
"modified": "2022-03-07T19:35:30Z",
"modified": "2023-02-03T05:06:28Z",
"published": "2022-02-25T00:01:05Z",
"aliases": [
"CVE-2022-24614"
],
"summary": "Allocation of Resources Without Limits or Throttling in metadata-extractor",
"details": "When reading a specially crafted JPEG file, metadata-extractor up to 2.16.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.",
"details": "When reading a specially crafted JPEG file, metadata-extractor up to 2.17.0 can be made to allocate large amounts of memory that finally leads to an out-of-memory error even for very small inputs. This could be used to mount a denial of service attack against services that use metadata-extractor library.",
"severity": [
{
"type": "CVSS_V3",
Expand All @@ -28,11 +28,14 @@
"introduced": "0"
},
{
"last_affected": "2.16.0"
"fixed": "2.18.0"
}
]
}
]
],
"database_specific": {
"last_known_affected_version_range": "<= 2.17.0"
}
}
],
"references": [
Expand Down
Loading