SUSE: Security Advisory (SUSE-SU-2022:1168-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:1168-1 Security update for libexif

This update for libexif fixes the following issues: - CVE-2020-0181: Fixed an integer overflow that could lead to denial of service bsc1172802. - CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial of service bsc1172768. - CVE-2020-0452: Fixed a buffer overflow check that...

SUSE: Security Advisory (SUSE-SU-2022:1148-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libexif (SUSE-SU-2022:1148-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1148-1 advisory. - CVE-2020-0181: Fixed an integer overflow that could lead to denial of service bsc1172802. -...

SUSE-SU-2022:1148-1 Security update for libexif

This update for libexif fixes the following issues: - CVE-2020-0181: Fixed an integer overflow that could lead to denial of service bsc1172802. - CVE-2020-0198: Fixed and unsigned integer overflow that could lead to denial of service bsc1172768. - CVE-2020-0452: Fixed a buffer overflow check that...

AlmaLinux 8 : libexif (ALSA-2020:5393)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:5393 advisory. - In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third par...

ASB-A-196085005

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

Mageia: Security Advisory (MGASA-2020-0238)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0113)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0331)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2018-0051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2019-0095)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0273)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libexif:exif_from_data_fuzzer: Use-of-uninitialized-value in exif_entry_format_value

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5780913485643776 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libexif:exif_from_data_fuzzer: Use-of-uninitialized-value in exif_entry_fix

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4872157730045952 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

libexif:exif_from_data_fuzzer: Crash in exif_mnote_data_canon_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4588170365239296 Project: libexif Fuzzing Engine: afl Fuzz Target: exiffromdatafuzzer Job Type: aflasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61d000010a89 Crash State:...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_data_load_data_content

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4568995416637440 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libexif Vulnerability (NS-SA-2021-0138)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libexif packages installed that are affected by a vulnerability: - An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. Thi...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libexif Multiple Vulnerabilities (NS-SA-2021-0158)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libexif packages installed that are affected by multiple vulnerabilities: - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media...

NewStart CGSL CORE 5.05 / MAIN 5.05 : libexif Vulnerability (NS-SA-2021-0179)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libexif packages installed that are affected by a vulnerability: - In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a thir...