Lucene search
Veracode Vulnerability DatabaseVERACODE:25658HistoryJun 11, 2020 - 7:19 a.m.
Integer Overflow
2020-06-1107:19:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.009 Low
EPSS
Percentile
82.6%
libexif.so is vulnerable to integer overflow. It is possible because it does not properly perform the overflowing calculations in exif-data.c when the offset is larger than UINT_MAX-2.
References
github.com/libexif/libexif/commit/ce03ad7ef4e8aeefce79192bf5b6f69fae396f0c
lists.fedoraproject.org/archives/list/[email protected]/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/
lists.fedoraproject.org/archives/list/[email protected]/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/
security.gentoo.org/glsa/202011-19
source.android.com/security/bulletin/pixel/2020-06-01
Related
cve
cve
CVE-2020-0181
2020-06-11 15:15:15
cvelist
cvelist
CVE-2020-0181
2020-06-11 14:43:48
prion
prion
Integer overflow
2020-06-11 15:15:00
nvd
nvd
CVE-2020-0181
2020-06-11 15:15:15
debiancve
debiancve
CVE-2020-0181
2020-06-11 15:15:15
redhatcve
redhatcve
CVE-2020-0181
2020-06-15 18:24:56
openvas
openvas
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2021-1151)
2021-02-02 00:00:00
Debian: Security Advisory (DLA-2100-1)
2020-02-11 00:00:00
Debian: Security Advisory (DSA-4618-1)
2020-02-07 00:00:00
osv
osv
libexif - security update
2020-02-06 00:00:00
libexif - security update
2020-02-10 00:00:00
ubuntucve
ubuntucve
CVE-2020-0181
2020-06-11 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : libexif (EulerOS-SA-2021-1151)
2021-02-01 00:00:00
SUSE SLED15 / SLES15 Security Update : libexif (SUSE-SU-2022:1148-1)
2022-04-12 00:00:00
SUSE SLES12 Security Update : libexif (SUSE-SU-2022:1168-1)
2022-04-13 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: libexif-0.6.22-3.fc33
2020-11-14 01:13:14
[SECURITY] Fedora 32 Update: libexif-0.6.22-2.fc32
2020-11-25 01:42:52
gentoo
gentoo
libexif: Multiple vulnerabilities
2020-11-16 00:00:00
oraclelinux
oraclelinux
libexif security update
2020-12-14 00:00:00
libexif security, bug fix, and enhancement update
2020-11-10 00:00:00
redhat
redhat
(RHSA-2020:4766) Moderate: libexif security, bug fix, and enhancement update
2020-11-03 12:34:21
androidsecurity
androidsecurity
Pixel Update Bulletin—June 2020
2020-06-01 00:00:00