Summary
USN-4987-1 fixed a vulnerability in ExifTool. This update provides
the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that ExifTool did not properly sanitize user data for the
DjVu file format. An attacker could use this vulnerability to cause a DoS or
possibly execute arbitrary code.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libimage-exiftool-perl | 10.10-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Medium 6.8
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code exe…
KEV Nov 17, 2021
References
-
report
https://ubuntu.com/security/CVE-2021-22204