Summary
It was discovered that ExifTool did not properly sanitize user data for the
DjVu file format. An attacker could use this vulnerability to cause a DoS or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | libimage-exiftool-perl | 10.80-1ubuntu0.1 |
| Ubuntu · 20.04 LTS 20.04:LTS | libimage-exiftool-perl | 11.88-1ubuntu0.1 |
Vulnerabilities 1
-
Medium 6.8
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exe…
KEV Nov 17, 2021
References
-
report
https://ubuntu.com/security/CVE-2021-22204