xv vulnerabilities and fixes

Recent CVEs affecting xv, with upgrade or downgrade steps. 1 tracked.

xv has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-03-05. Highest priority: CVE-2017-18215 (score 60/100).

• CVE-2017-18215 CRITICAL 9.8 DOWNGRADE MITIGATE xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to c

FAQ

How do I fix xv vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xv being exploited right now?

None of the tracked xv CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xv CVE should I patch first?

CVE-2017-18215 currently ranks highest (60/100): xvpng.c in xv 3.10a has memory corruption (out-of-bounds write) when decoding PNG comment fields, leading to c.

← Back to latest CVEs