Uncontrolled Resource Consumption in MetadataExtractor · CVE-2019-14262 · GitHub Advisory Database · GitHub

Uncontrolled Resource Consumption in MetadataExtractor

High severity GitHub Reviewed Published Aug 23, 2019 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

MetadataExtractor (NuGet)

Affected versions

<= 2.1.0

Patched versions

2.2.0

Description

MetadataExtractor 2.1.0 allows stack consumption.

References

Published by the National Vulnerability Database

Jul 25, 2019

Reviewed Aug 22, 2019

Published to the GitHub Advisory Database Aug 23, 2019

Last updated Feb 1, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H