Skip to content
OpenAdvisories
Unscored RHSA-2007:1165 2 CVEs

Red Hat Security Advisory: libexif security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client libexif 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client libexif-debuginfo 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libexif 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libexif-debuginfo 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::client_workstation libexif-devel 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server libexif 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server libexif-debuginfo 0:0.6.13-4.0.2.el5_1.1
Red Hat · RHEL 5 enterprise_linux:5::server libexif-devel 0:0.6.13-4.0.2.el5_1.1

Vulnerabilities 2

  • Unscored —
    CVE-2007-6351

    libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an …

    libexif Debian
  • Unscored —
    CVE-2007-6352

    Integer overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute arbitrary code via an imag…

    libexif Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=425551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=425561
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1165.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-6351
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6351
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6351
  • report
    https://access.redhat.com/security/cve/CVE-2007-6352
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6352
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6352