Summary
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information.
(CVE-2020-0093, CVE-2020-0182)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a remote denial of service.
(CVE-2020-0198)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to expose sensitive information or
cause a crash. (CVE-2020-13112)
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash.
(CVE-2020-13113)
It was discovered libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
(CVE-2020-13114)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libexif | 0.6.21-2ubuntu0.5 |
| Ubuntu · 18.04 LTS 18.04:LTS | libexif | 0.6.21-4ubuntu0.5 |
| Ubuntu · 20.04 LTS 20.04:LTS | libexif | 0.6.21-6ubuntu0.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libexif | 0.6.21-1ubuntu1+esm5 |
Vulnerabilities 6
-
Unscored —
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This…
-
Unscored —
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Unscored —CVE-2020-0198 Public exploit
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could l…
-
Unscored —
An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to in…
-
Unscored —
An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to …
-
Unscored —
An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead…