Lucene search
Veracode Vulnerability DatabaseVERACODE:13365HistoryFeb 21, 2019 - 4:43 a.m.
Denial Of Service (DoS)
2019-02-2104:43:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.007 Low
EPSS
Percentile
80.5%
libexif.so is vulnerable to denial of service. The processing of EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags allows for an attacker to exhaust available CPU resources and crash the process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| libexif.so | eq | 12.3.3 | |
| libexif:edge | eq | 0.6.21-r3 |
References
lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html
lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89
lists.debian.org/debian-lts-announce/2020/05/msg00016.html
lists.debian.org/debian-lts-announce/2020/05/msg00025.html
secuniaresearch.flexerasoftware.com/secunia_research/2018-28/
usn.ubuntu.com/4358-1/
Related
openvas
openvas
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2019-1095)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2019-0095)
2022-01-28 00:00:00
Fedora Update for libexif FEDORA-2019-e2f47b40a3
2019-05-07 00:00:00
nessus
nessus
RHEL 8 : libexif (Unpatched Vulnerability)
2024-05-11 00:00:00
EulerOS 2.0 SP2 : libexif (EulerOS-SA-2019-1116)
2019-04-02 00:00:00
Fedora 29 : libexif (2019-e2f47b40a3)
2019-02-15 00:00:00
mageia
mageia
Updated libexif packages fix security vulnerability
2019-02-21 01:18:01
prion
prion
Code injection
2019-02-20 17:29:00
redhatcve
redhatcve
CVE-2018-20030
2019-01-07 09:49:35
cvelist
cvelist
CVE-2018-20030
2018-10-12 00:00:00
ubuntucve
ubuntucve
CVE-2018-20030
2019-02-20 00:00:00
debiancve
debiancve
CVE-2018-20030
2019-02-20 17:29:00
alpinelinux
alpinelinux
CVE-2018-20030
2019-02-20 17:29:00
nvd
nvd
CVE-2018-20030
2019-02-20 17:29:00
fedora
fedora
[SECURITY] Fedora 29 Update: libexif-0.6.21-19.fc29
2019-02-15 02:39:33
[SECURITY] Fedora 28 Update: libexif-0.6.21-19.fc28
2019-03-01 23:11:16
cve
cve
CVE-2018-20030
2019-02-20 17:29:00
osv
osv
CVE-2018-20030
2019-02-20 17:29:00
libexif - security update
2020-05-28 00:00:00
libexif - security update
2020-05-18 00:00:00
suse
suse
Security update for libexif (moderate)
2020-03-01 00:00:00
Security update for libexif (moderate)
2020-06-11 00:00:00
cloudfoundry
cloudfoundry
USN-4358-1: libexif vulnerabilities | Cloud Foundry
2020-06-24 00:00:00
ubuntu
ubuntu
libexif vulnerabilities
2020-05-13 00:00:00
debian
debian
[SECURITY] [DLA 2214-1] libexif security update
2020-05-18 05:12:09
[SECURITY] [DLA 2222-1] libexif security update
2020-05-28 14:29:35
slackware
slackware
[slackware-security] libexif
2020-05-19 20:20:39
freebsd
freebsd
libexif -- multiple vulnerabilities
2020-05-18 00:00:00