An Update For Exempi Is Now Available For Red Hat Enterprise Linux 7. Red Hat Product Security Has Rated This Update As Having A Security Impact Of Low. A Common Vulnerability Scoring System (CVSS) Base Score, Which Gives A Det...(exceeded 255 Characters)

exempi is vulnerable to denial of service DoS. The vulnerability exists through a use after free issue via a PDF file containing JPEG data...

Denial Of Service (DoS)

exempi is vulnerable to denial of service DoS. The vulnerability exists through an infinite Loop in Chunk class in XMPFiles/source/FormatSupport/RIFF.cpp...

exempi: Infinite loop in TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/FormatSupport/QuickTime_Support.cpp

An infinite loop has been discovered in Exempi in the way it handles Extensible Metadata Platform XMP data in QuickTime files. An attacker could cause a denial of service via a crafted file...

exempi: Infinite loop in ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASF_Support.cpp

An issue was discovered in Exempi before 2.4.4. The ASFSupport::ReadHeaderObject function in XMPFiles/source/FormatSupport/ASFSupport.cpp allows remote attackers to cause a denial of service infinite loop via a crafted .asf file...

exempi: Use after free via a PDF file containing JPEG data

An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service invalid memcpy with resultant use-after-free or possibly have unspecified other impact via a .pdf file containing JPEG data, related to XMPFiles/source/FormatSupport/ReconcileTIFF.cpp,...

Low: Red Hat Security Advisory: exempi security update

An update for exempi is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

openSUSE: Security Advisory for exempi (openSUSE-SU-2019:1649-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : exempi (openSUSE-2019-1649)

This update for exempi fixes the following issues : - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. This update was imported from the SUSE:SLE-15:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...

openSUSE Security Update : exempi (openSUSE-2019-1657)

This update for exempi fixes the following issues : - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks i...

OPENSUSE-SU-2019:1657-1 Security update for exempi

This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2019:1649-1 Security update for exempi

This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. This update was imported from the SUSE:SLE-15:Update update project...

EulerOS 2.0 SP8 : exempi (EulerOS-SA-2019-1645)

According to the version of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Exempi is vulnerable to an issue that may manifest as a NULL pointer dereference or an out-of-bounds access due to not checking if vector is of...

Security update for exempi (moderate)

openSUSE Security Update: Security update for exempi Announcement ID: openSUSE-SU-2019:1649-1 Rating: moderate References: 1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.0 An update that fixes one vulnerability is now available. Description: This update for exempi...

Security update for exempi (moderate)

openSUSE Security Update: Security update for exempi Announcement ID: openSUSE-SU-2019:1657-1 Rating: moderate References: 1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for exempi...

SUSE SLED15 / SLES15 Security Update : exempi (SUSE-SU-2019:1603-1)

This update for exempi fixes the following issues : CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted ...

SUSE-SU-2019:1603-1 Security update for exempi

This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference crash issue when processing webp files bsc1098946...

Fedora 28 : exempi (2018-05d08fddf8)

Fix for CVE-2018-12648. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 29 : exempi (2018-d8824aeec5)

Fix for CVE-2018-12648. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 28 : exempi (2018-1c9f6768cf)

Version 2.4.5 fixes the following security issues : - CVE-2018-7728 - CVE-2018-7729 - CVE-2018-7730 - CVE-2018-7731 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Updated exempi packages fix security vulnerability

It was found that the WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBPSupport.hpp in Exempi 2.4.5 has a NULL pointer dereference CVE-2018-12648...