CVE-2018-17282 — exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash

Back Back to CVE browser

MEDIUM

exiv2: NULL pointer dereference in Exiv2::DataValue::copy in value.cpp leading to application crash

Published Sep 20, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 2.15%

Description

An issue was discovered in Exiv2 v0.26. The function Exiv2::DataValue::copy in value.cpp has a NULL pointer dereference.

Affected products

Red Hat Enterprise Linux 7

exiv2-0:0.27.0-2.el7_6

Fixed · RHSA-2019:2101
Red Hat Enterprise Linux 8

exiv2-0:0.27.2-5.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

gegl-0:0.2.0-39.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

gnome-color-manager-0:3.28.0-3.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 8

libgexiv2-0:0.10.8-4.el8

Fixed · RHSA-2020:1577
Red Hat Enterprise Linux 6

exiv2

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 7	exiv2-0:0.27.0-2.el7_6	Fixed	RHSA-2019:2101
Red Hat Enterprise Linux 8	exiv2-0:0.27.2-5.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	gegl-0:0.2.0-39.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	gnome-color-manager-0:3.28.0-3.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 8	libgexiv2-0:0.10.8-4.el8	Fixed	RHSA-2020:1577
Red Hat Enterprise Linux 6	exiv2	Not affected	n/a

Remediation

Red Hat statement

This issue did not affect the versions of exiv2 as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7 prior to 7.5 as they did not include the vulnerable code.

Metrics

2.15% 0.02146

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02146

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v5

Table of values (17 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.15% (0.02146)	81.42th	v5 (v2026.06.15)
Jun 15, 2026	2.06% (0.02062)	78.79th	v5 (v2026.06.15)
Jul 20, 2024	0.30% (0.00299)	69.77th	v3 (v2023.03.01)
Jul 5, 2024	0.30% (0.00299)	69.66th	v3 (v2023.03.01)
May 9, 2024	0.41% (0.00414)	73.94th	v3 (v2023.03.01)
Feb 8, 2024	0.39% (0.00390)	72.58th	v3 (v2023.03.01)
Sep 14, 2023	0.39% (0.00390)	69.99th	v3 (v2023.03.01)
Jul 8, 2023	0.34% (0.00340)	67.44th	v3 (v2023.03.01)
Mar 7, 2023	0.29% (0.00291)	64.15th	v3 (v2023.03.01)
Mar 6, 2023	0.95% (0.00954)	36.37th	v2 (v2022.01.01)
Sep 2, 2022	0.95% (0.00954)	34.50th	v2 (v2022.01.01)
Apr 1, 2022	0.95% (0.00954)	32.50th	v2 (v2022.01.01)
Feb 4, 2022	0.95% (0.00954)	16.28th	v2 (v2022.01.01)
Feb 3, 2022	0.83% (0.00833)	24.58th	v1
Jan 6, 2022	0.83% (0.00833)	23.96th	v1
Sep 1, 2021	0.83% (0.00833)	57.50th	v1
Apr 14, 2021	0.83% (0.00833)	0.00th	v1

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (7)

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html
vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2101
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-17282
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1632490
Issue Tracking
https://github.com/Exiv2/exiv2/issues/457
x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-17282
https://www.cve.org/CVERecord?id=CVE-2018-17282

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00009.html		vendor-advisoryx_refsource_SUSE
https://access.redhat.com/errata/RHSA-2019:2101		vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2018-17282		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1632490		Issue Tracking
https://github.com/Exiv2/exiv2/issues/457		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2018-17282
https://www.cve.org/CVERecord?id=CVE-2018-17282