CVE-2018-11037

Published: 14 May 2018

In Exiv2 0.26, the Exiv2::PngImage::printStructure function in pngimage.cpp allows remote attackers to cause an information leak via a crafted file.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
exiv2 Launchpad, Ubuntu, Debian	Upstream	Needs triage



	Ubuntu 18.04 LTS (Bionic Beaver)	Ignored
	Ubuntu 16.04 LTS (Xenial Xerus)	Ignored
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist (trusty was ignored)

Author	Note
mdeslaur	upstream has closed this CVE as they could not reproduce it. marking as ignored.

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.