Summary
It was discovered that libexif incorrectly handled certain inputs.
An attacker could possibly use this issue to cause unexpected behaviours,
or execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libexif | 0.6.21-2ubuntu0.6 |
| Ubuntu · 18.04 LTS 18.04:LTS | libexif | 0.6.21-4ubuntu0.6 |
| Ubuntu · 20.04 LTS 20.04:LTS | libexif | 0.6.21-6ubuntu0.4 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libexif | 0.6.21-1ubuntu1+esm6 |
Vulnerabilities 1
-
Unscored —CVE-2020-0452 Public exploit
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could…
References
-
report
https://ubuntu.com/security/CVE-2020-0452