CVE-2020-18774: 
Python vulnerability analysis and mitigation

A float point exception vulnerability exists in the printLong function within tags_int.cpp of Exiv2 version 0.27.99.0. This vulnerability was assigned CVE-2020-18774 and allows attackers to cause a denial of service (DOS) condition through a specially crafted TIF file (NVD, CVE).

The vulnerability is caused by a floating-point exception in the printLong function located in tags_int.cpp. When processing certain TIF files, the function attempts a division operation that can trigger an arithmetic exception. The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H (NVD).

When successfully exploited, the vulnerability can lead to a denial of service condition through an arithmetic exception, causing the application to crash. This affects the availability of the Exiv2 service when processing maliciously crafted TIF files (NVD).

Users are advised to upgrade to Exiv2 version 0.28.1 or later to address this vulnerability. For Gentoo users, the recommended action is to update the package using the command 'emerge --ask --oneshot --verbose ">=media-gfx/exiv2-0.28.1"' (Gentoo Advisory).