Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : libexif vulnerabilities (USN-4358-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4358-1 advisory. It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of...

USN-4358-1: libexif vulnerabilities

It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of service. CVE-2018-20030 It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. CVE-2020-12767...

USN-4358-1 libexif vulnerabilities

It was discovered that libexif incorrectly handled certain tags. An attacker could possibly use this issue to cause a denial of service. CVE-2018-20030 It was discovered that libexif incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash. CVE-2020-12767...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

Libexif Digit Error Vulnerability

libexif is a library of functions written in the C language. It is mainly used to read and write EXIF meta-information from graphics files. A numeric error vulnerability exists in the exifentrygetvalue file in exif-entry.c in libexif version 0.6.21. The vulnerability arises from a network system ...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

ALPINE-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

DEBIAN-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

UBUNTU-CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

Design/Logic Flaw

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

CVE-2020-12767

The CVE-2020-12767 issue affects libexif version 0.6.21, where exif_entry_get_value in exif-entry.c has a divide-by-zero condition. Multiple connected notices confirm this specific vulnerability in libexif 0.6.21 and reference fix/mitigation in subsequent releases (notably libexif 0.6.22). Practi...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

CVE-2020-12767

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

CVE-2020-12767: Divide By Zero

exifentrygetvalue in exif-entry.c in libexif 0.6.21 has a divide-by-zero error...

The vulnerability of the library for grammatical analysis of EXIF files in libexif allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the library for grammatical analysis of EXIF files in libexif is due to a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to access confidential data, compromise its integrity, and even cause service failures...

Arbitrary Code Execution

libexif is vulnerable to arbitrary code execution. An integer overflow flaw was found in the way libexif parses Exif image tags. If a victim opens a carefully crafted Exif image file, it could cause the application linked against libexif to execute arbitrary code, or crash...

Denial Of Service (DoS)

libexif is vulnerable to denial of service. An infinite recursion flaw was found in the way libexif parses Exif image tags. If a victim opens a carefully crafted Exif image file, it could cause the application linked against libexif to crash...

Denial Of Service (DoS)

The libexif package is vulnerable to Denial Of Service DoS. An integer overflow flaw was found in the way libexif parses EXIF image tags. If a victim opens a carefully crafted EXIF image file it could cause the application linked against libexif to execute arbitrary code or crash...