VIR Vulnerability Intelligence Relay

CVE-2018-14338

medium
Published 2020-04-28 · Modified 2021-08-11
CVSS v3
—
CVSS v2
—
VIR risk
5.5

Description

Moderate: exiv2 security, bug fix, and enhancement update

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2020-1577.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2020:1577

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2018-14338

OS impact
OSVersionStatusFixed in
debian debianbookwormaffected
debian debianbullseyeaffected
debian debianforkyaffected
debian debiansidaffected
debian debiantrixieaffected
rockylinux rocky8fixed

References

Verify integrity in audit chain (admin only). AS-IS.