An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade libexif | Aug 22, 2024 | May 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade libexif-debuginfoUpgrade libexifUpgrade libexif-docUpgrade libexif-devel | Jul 2, 2020 | May 21, 2020 |
| Amazon_linux | — | Upgrade libexif | Jul 18, 2020 | May 21, 2020 |
| Centos_linux | — | Upgrade libexif-docUpgrade libexif-debugsourceUpgrade libexif-debuginfoUpgrade libexif-develUpgrade libexif | Jun 12, 2020 | May 21, 2020 |
| Debian | — | Upgrade libexif | Jun 1, 2020 | May 21, 2020 |
| Gentoo Linux | — | Upgrade media-libs/libexif. | Jul 28, 2020 | May 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libexif | Nov 3, 2020 | May 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade libexif | Sep 28, 2020 | May 21, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libexif | Sep 3, 2020 | May 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libexif | Jul 31, 2020 | May 21, 2020 |
| Oracle Solaris | — | Upgrade image/library/libexif to version 0.6.22-11.4.22.0.1.69.4 on Solaris 11.4 | Jan 19, 2021 | May 21, 2020 |
| Oracle_linux | — | Upgrade libexifUpgrade libexif-develUpgrade libexif-doc | Jun 13, 2020 | May 16, 2020 |
| Redhat_linux | — | Upgrade libexif-debugsourceUpgrade libexif-debuginfoNo solution existsUpgrade libexifUpgrade libexif-docUpgrade libexif-devel | Jun 12, 2020 | May 21, 2020 |
| Suse | — | Upgrade libexif12Upgrade libexif-devel-32bitUpgrade libexif-develUpgrade libexif12-32bit | Jun 6, 2020 | May 21, 2020 |
| Ubuntu | — | Upgrade libexif12 (Ubuntu Pro)Upgrade libexif12 | Jun 17, 2020 | May 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub