OESA-2021-1352 libexif security update

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fixes: An issue was discovered in libexif before 0.6.22. Several buffer over-reads ...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2021-2394)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : libexif (EulerOS-SA-2021-2394)

According to the version of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution ...

libexif:exif_from_data_fuzzer: Heap-buffer-overflow in exif_get_slong

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5645042249760768 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libexif:exif_from_data_fuzzer: Crash in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4577720328126464 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61110000009c...

libexif:exif_from_data_fuzzer: Heap-buffer-overflow in exif_get_slong

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=6227140945772544 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libexif:exif_loader_fuzzer: Crash in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4900628550778880 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6311000007ff Cra...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_get_slong

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=6355161940361216 Project: libexif Fuzzing Engine: afl Fuzz Target: exifloaderfuzzer Job Type: aflasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x602000000113...

libexif:exif_from_data_fuzzer: Heap-buffer-overflow in exif_get_sshort

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5021203147390976 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exiffromdatafuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_apple_load

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=5571105661255680 Project: libexif Fuzzing Engine: afl Fuzz Target: exifloaderfuzzer Job Type: aflasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60f0000002c8...

libexif:exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_apple_identify

Project: https://github.com/libexif/libexif.git Detailed Report: https://oss-fuzz.com/testcase?key=4532703432146944 Project: libexif Fuzzing Engine: libFuzzer Fuzz Target: exifloaderfuzzer Job Type: libfuzzerasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

OESA-2021-1286 libexif security update

Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags. Security Fixes: An issue was discovered in libexif before 0.6.22. Use of uninitialized memor...

The vulnerability of EXIF_IFD-interoperability and EXIF_IFD-EXIF libraries for grammatical analysis of EXIF files in libexif, related to uncontrolled resource consumption, allows attackers to cause service failures. [source-iocs-preserved const=EXIF_IFD_EXIF,EXIF_IFD_INTEROPERABILITY]

The vulnerability of EXIFIFD-interoperability and EXIFIFD-EXIF libraries for grammatical analysis of EXIF files related to libexif involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures. source-iocs-preserved...

The vulnerability of the exif_data_save_data_entry function in the library for grammatical analysis of EXIF files in libexif, related to reading beyond the permissible buffer limits, allows a perpetrator to access confidential information or cause service failures.

The vulnerability of the exifdatasavedataentry function in the EXIF-file grammar analysis library libexif is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...

The vulnerability of the library for EXIF file grammar analysis in libexif, which arises from reading beyond the permissible buffer limit, allows an intruder to access confidential data and also causes service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, as well as cause service failures...

The vulnerability of the library for EXIF file grammar analysis in libexif, related to uncontrolled resource consumption, allows a violator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the library for EXIF file grammar analysis in libexif, due to the lack of checks for division by zero, allows a perpetrator to cause a service failure.

The vulnerability of the library for EXIF file parsing in libexif is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the exif_entry_get_value function in the exif-entry.c component of the Libexif library for EXIF-file parsing allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the exifentrygetvalue function in the exif-entry.c component of the Libexif library for EXIF-file parsing is related to integer overflow of values. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

SUSE SLES11 Security Update : libexif (SUSE-SU-2020:14294-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14294-1 advisory. - An error when processing the EXIFIFDINTEROPERABILITY and EXIFIFDEXIF tags within libexif version 0.6.21 can be exploited to exhaust availabl...

SUSE: Security Advisory (SUSE-SU-2018:0195-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...