VIR Vulnerability Intelligence Relay

CVE-2018-9306

medium
Published 2020-04-28 · Modified 2021-08-11
CVSS v3
—
CVSS v2
—
VIR risk
5.5

Description

Moderate: exiv2 security, bug fix, and enhancement update

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: alma — https://errata.almalinux.org/8/ALSA-2020-1577.html

vendor Authored 2026-05-27

Vendor advisory: rocky — https://errata.rockylinux.org/RLSA-2020:1577

OS impact
OSVersionStatusFixed in
rockylinux rocky8fixed
almalinux almalinux8fixedlibgexiv2-devel-0.10.8-4.el8.i686.rpm

References

Verify integrity in audit chain (admin only). AS-IS.