CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

DEBIAN-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

ALPINE-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

UBUNTU-CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

Integer overflow

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

CVE-2016-6328 affects the libexif library, where an integer overflow during parsing of the MNOTE entry data in input files can lead to Denial-of-Service and Information Disclosure (including sensitive heap data). Public remediation exists: Debian LTS fixed in libexif 0.6.21-2+deb8u2; Cloud Foundr...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

CVE-2016-6328

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service DoS and Information Disclosure disclosing some critical heap chunk metadata, even other applications' private data...

libexif/exif_loader_fuzzer: Use-of-uninitialized-value in exif_mnote_data_olympus_load

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=6333153978351616 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-val...

libexif/exif_loader_fuzzer: Heap-buffer-overflow in exif_mnote_data_olympus_load

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5187910488817664 Project: libexif Fuzzer: afllibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: aflasanlibexif Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

libexif/exif_loader_fuzzer: Use-of-uninitialized-value in exif_entry_get_value

Project: https://github.com/libexif/libexif.git Detailed report: https://oss-fuzz.com/testcase?key=5692510711054336 Project: libexif Fuzzer: libFuzzerlibexifexifloaderfuzzer Fuzz target binary: exifloaderfuzzer Job Type: libfuzzermsanlibexif Platform Id: linux Crash Type: Use-of-uninitialized-val...

SUSE SLES11 Security Update : libexif (SUSE-SU-2018:0195-1)

This update for libexif fixes the following security issue : - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or...

SUSE SLED12 / SLES12 Security Update : libexif (SUSE-SU-2018:0193-1)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

openSUSE Security Update : libexif (openSUSE-2018-86)

This update for libexif fixes several issues. These security issues were fixed : - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

SUSE-SU-2018:0193-1 Security update for libexif

This update for libexif fixes several issues. These security issues were fixed: - CVE-2016-6328: Fixed integer overflow in parsing MNOTE entry data of the input file bsc1055857 - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c...

SUSE-SU-2018:0195-1 Security update for libexif

This update for libexif fixes the following security issue: - CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or...

Fedora 27 : libexif (2017-b24ef59f94)

Patch for CVE-2016-6328 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...