953 matches found
CVE-2020-13114
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...
CVE-2020-13114
CVE-2020-13114 affects libexif up to version 0.6.21, where an unrestricted size in handling Canon EXIF MakerNote data can cause excessive compute time during EXIF decoding (DoS). Affected component: libexif (exif-data.c/maker-note handling). Impact described across multiple advisories: potential ...
CVE-2020-13114
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data...
Libexif Buffer Overflow Vulnerability
libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A buffer overflow vulnerability exists in the processing of EXIF MakerNote in versions prior to libexif 0.6.22. An attacker could exploit this vulnerability ...
libexif code issue vulnerability
libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A code issue vulnerability exists in versions prior to libexif 0.6.22 that stems from the use of uninitialized memory during EXIF Makernote processing. An...
libexif Resource Management Error Vulnerability
libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A security vulnerability exists in versions prior to libexif 0.6.22, which stems from the program failing to limit the size value when processing Canon EXIF...
Slackware 14.0 / 14.1 / 14.2 / current : libexif (SSA:2020-140-02)
New libexif packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2020-140-02. The text itself is copyright C Slackware...
[slackware-security] libexif
New libexif packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libexif-0.6.22-i486-1slack14.2.txz: Upgraded. This update fixes bugs and security issues: CVE-2018-20030: Fix for...
Debian: Security Advisory (DLA-2214-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2214-1] libexif security update
Package : libexif Version : 0.6.21-2+deb8u2 CVE ID : CVE-2016-6328 CVE-2017-7544 CVE-2018-20030 CVE-2020-0093 CVE-2020-12767 Debian Bug : 960199 918730 876466 873022 Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files. CVE-2016-6328 An integer overflow...
libexif -- multiple vulnerabilities
Release notes: Lots of fixes exposed by fuzzers like AFL, ClusterFuzz, OSSFuzz and others: CVE-2016-6328: fixed integer overflow when parsing maker notes CVE-2017-7544: fixed buffer overread CVE-2018-20030: Fix for recursion DoS CVE-2019-9278: replaced integer overflow checks the compiler could...
Debian DLA-2214-1 : libexif security update
Various vulnerabilities have been addressed in libexif, a library to parse EXIF metadata files. CVE-2016-6328 An integer overflow when parsing the MNOTE entry data of the input file had been found. This could have caused denial of service DoS and Information Disclosure disclosing some critical he...
DLA-2214-1 libexif - security update
Bulletin has no description...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libexif vulnerabilities (USN-4358-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4358-1 advisory. It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of...
Ubuntu: Security Advisory (USN-4358-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4358-1 libexif vulnerabilities
It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of service. CVE-2018-20030 It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. CVE-2020-12767...
USN-4358-1: libexif vulnerabilities
It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of service. CVE-2018-20030 It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. CVE-2020-12767...
CVE-2020-12767
exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...
Libexif Digit Error Vulnerability
libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A numeric error vulnerability exists in the exifentrygetvalue file in exif-entry.c in libexif version 0.6.21. The vulnerability arises from a network system ...
