Skip to content
OpenAdvisories
Low ELSA-2019-2048 5 CVEs

Low: exempi security update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Summary

[2.2.0-9]
- Fix CVE-2017-18233
resolves: #1574865
- Fix CVE-2017-18234
resolves: #1656011
- Fix CVE-2017-18236
resolves: #1574905
- Fix CVE-2017-18238
resolves: #1572270
- Fix CVE-2018-7730
resolves: #1572631

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 exempi 0:2.2.0-9.el7
Oracle Linux · 7 exempi-devel 0:2.2.0-9.el7

Vulnerabilities 5

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RI…

  • Unscored —

    An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy…

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSup…

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/Format…

  • Unscored —

    An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFiles/source…