Summary
It was discovered that libexif incorrectly handled certain tags.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2018-20030)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.
(CVE-2020-12767)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libexif | 0.6.21-2ubuntu0.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | libexif | 0.6.21-4ubuntu0.2 |
| Ubuntu · 20.04 LTS 20.04:LTS | libexif | 0.6.21-6ubuntu0.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libexif | 0.6.21-1ubuntu1+esm2 |
Vulnerabilities 2
-
Unscored —
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be expl…
-
Unscored —
exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.