Lucene search
Veracode Vulnerability DatabaseVERACODE:25721HistoryJun 19, 2020 - 5:24 a.m.
Denial Of Service (DoS)
2020-06-1905:24:52
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
EPSS
0.133
Percentile
95.7%
libexif.so is vulnerable to denial of service. The vulnerability exists because the function exif_data_load_data_content in exif-data.c does not handle the UBSAN abort due to an integer overflow which allows an attacker to cause an application crash.
References
github.com/libexif/libexif/commit/ce03ad7ef4e8aeefce79192bf5b6f69fae396f0c
lists.debian.org/debian-lts-announce/2020/06/msg00020.html
lists.fedoraproject.org/archives/list/[email protected]/message/ELDZR6USD5PR34MRK2ZISLCYJ465FNKN/
lists.fedoraproject.org/archives/list/[email protected]/message/SVBD5JRUQPN4LQHTAAJHA3MR5M7YTAC7/
security.gentoo.org/glsa/202011-19
source.android.com/security/bulletin/pixel/2020-06-01
usn.ubuntu.com/4396-1/
Related
prion
prion
Integer overflow
2020-06-11 15:15:00
redhatcve
redhatcve
CVE-2020-0198
2020-06-15 18:24:56
cvelist
cvelist
CVE-2020-0198
2020-06-11 14:43:48
ubuntucve
ubuntucve
CVE-2020-0198
2020-06-09 00:00:00
debiancve
debiancve
CVE-2020-0198
2020-06-11 15:15:16
cve
cve
CVE-2020-0198
2020-06-11 15:15:16
nvd
nvd
CVE-2020-0198
2020-06-11 15:15:16
alpinelinux
alpinelinux
CVE-2020-0198
2020-06-11 15:15:16
mageia
mageia
Updated libexif packages fix security vulnerability
2020-07-05 01:47:21
openvas
openvas
Mageia: Security Advisory (MGASA-2020-0273)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2249-1)
2020-06-14 00:00:00
Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2021-1151)
2021-02-02 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : libexif (EulerOS-SA-2021-1151)
2021-02-01 00:00:00
Debian DLA-2249-1 : libexif security update
2020-06-17 00:00:00
Fedora 33 : libexif (2020-e99ef3282f)
2020-11-17 00:00:00
osv
osv
libexif - security update
2020-06-13 00:00:00
libexif-devel-0.6.23-1.2 on GA media
2024-06-15 00:00:00
debian
debian
[SECURITY] [DLA 2249-1] libexif security update
2020-06-13 16:11:08
oraclelinux
oraclelinux
libexif security update
2020-12-14 00:00:00
libexif security, bug fix, and enhancement update
2020-11-10 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: libexif-0.6.22-2.fc32
2020-11-25 01:42:52
[SECURITY] Fedora 33 Update: libexif-0.6.22-3.fc33
2020-11-14 01:13:14
gentoo
gentoo
libexif: Multiple vulnerabilities
2020-11-16 00:00:00
ubuntu
ubuntu
libexif vulnerabilities
2020-06-16 00:00:00
cloudfoundry
cloudfoundry
USN-4396-1: libexif vulnerabilities | Cloud Foundry
2020-06-24 00:00:00
redhat
redhat
(RHSA-2020:4766) Moderate: libexif security, bug fix, and enhancement update
2020-11-03 12:34:21
androidsecurity
androidsecurity
Pixel Update Bulletin—June 2020
2020-06-01 00:00:00