Lucene search
Veracode Vulnerability DatabaseVERACODE:25653HistoryJun 11, 2020 - 3:27 a.m.
Privilege Escalation
2020-06-1103:27:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.002 Low
EPSS
Percentile
60.5%
libexif is vulnerable to privilege escalation. The vulnerability exists through several buffer over-reads in EXIF MakerNote handling.
References
lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
access.redhat.com/errata/RHSA-2020:2474
access.redhat.com/security/updates/classification/#moderate
github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1
lists.debian.org/debian-lts-announce/2020/05/msg00025.html
security.gentoo.org/glsa/202007-05
usn.ubuntu.com/4396-1/
Related
redhat
redhat
(RHSA-2020:2516) Moderate: libexif security update
2020-06-10 19:25:54
(RHSA-2020:2474) Moderate: libexif security update
2020-06-10 08:47:21
(RHSA-2020:2549) Moderate: libexif security update
2020-06-15 12:12:33
nessus
nessus
CentOS 7 : libexif (CESA-2020:2549)
2020-06-17 00:00:00
Oracle Linux 8 : libexif (ELSA-2020-2550)
2020-06-17 00:00:00
RHEL 7 : libexif (RHSA-2020:2549)
2020-06-17 00:00:00
oraclelinux
oraclelinux
libexif security update
2020-06-16 00:00:00
libexif security update
2020-06-15 00:00:00
libexif security update
2020-06-12 00:00:00
osv
osv
[libexif] Vulnerability: 2 vulnerabilities
2022-02-01 00:00:00
CVE-2020-13112
2020-05-21 16:15:10
libexif - security update
2020-05-28 00:00:00
openvas
openvas
CentOS: Security Advisory for libexif (CESA-2020:2549)
2020-06-17 00:00:00
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-2356)
2020-11-04 00:00:00
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2020-1923)
2020-09-04 00:00:00
centos
centos
libexif security update
2020-06-16 18:32:09
redhatcve
redhatcve
CVE-2020-13112
2020-05-26 19:15:38
qualysblog
qualysblog
A Deep Dive into VMDR 2.0 with Qualys TruRisk™
2022-08-08 21:54:42
debiancve
debiancve
CVE-2020-13112
2020-05-21 16:15:10
amazon
amazon
Medium: libexif
2020-07-14 01:51:00
Medium: libexif
2020-06-26 22:52:00
cve
cve
CVE-2020-13112
2020-05-21 16:15:10
nvd
nvd
CVE-2020-13112
2020-05-21 16:15:10
prion
prion
Information disclosure
2020-05-21 16:15:00
alpinelinux
alpinelinux
CVE-2020-13112
2020-05-21 16:15:10
ubuntucve
ubuntucve
CVE-2020-13112
2020-05-21 00:00:00
cvelist
cvelist
CVE-2020-13112
2020-05-21 15:56:28
mageia
mageia
Updated libexif packages fix security vulnerability
2020-05-27 22:06:44
debian
debian
[SECURITY] [DLA 2222-1] libexif security update
2020-05-28 14:29:35
cloudfoundry
cloudfoundry
USN-4396-1: libexif vulnerabilities | Cloud Foundry
2020-06-24 00:00:00
ubuntu
ubuntu
libexif vulnerabilities
2020-06-16 00:00:00
gentoo
gentoo
libexif: Multiple vulnerabilities
2020-07-26 00:00:00
freebsd
freebsd
libexif -- multiple vulnerabilities
2020-05-18 00:00:00
suse
suse
Security update for libexif (moderate)
2020-06-11 00:00:00
slackware
slackware
[slackware-security] libexif
2020-05-19 20:20:39