Red Hat Security AdvisoryRHSA-2012:1255
libexif security update
Released 2012-09-11 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) libexif-0.6.21-1.el5_8, libexif-devel-0.6.21-1.el5_8, libexif-devel-0.6.21-1.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) libexif-0.6.21-1.el5_8, libexif-0.6.21-1.el5_8.i386, libexif-0.6.21-1.el5_8.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 5 client) libexif-0.6.21-1.el5_8, libexif-0.6.21-1.el5_8.i386
- Red Hat Enterprise Linux Desktop (v. 6) libexif-0.6.21-5.el6_3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libexif-0.6.21-5.el6_3, libexif-devel-0.6.21-5.el6_3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libexif-0.6.21-5.el6_3, libexif-devel-0.6.21-5.el6_3
- Red Hat Enterprise Linux Server (v. 6) libexif-0.6.21-5.el6_3, libexif-0.6.21-5.el6_3.ppc, libexif-devel-0.6.21-5.el6_3 +1
- Red Hat Enterprise Linux Workstation (v. 6) libexif-0.6.21-5.el6_3, libexif-devel-0.6.21-5.el6_3
Fixes 7 records
Priority MEDIUM 43
Buffer overflow in the exif_entry_format_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 allows remote attackers to cause a denial of service or possibly execute arbitrary code via cra…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07619 · Published 2012-07-13 · Fixed CWE-119
Priority MEDIUM 42
Integer underflow in the exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) 0.6.20 might allow remote attackers to execute arbitrary code via vectors involving a crafted buffer-si…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05751 · Published 2012-07-13 · Fixed CWE-189
Priority MEDIUM 41
Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service or possibly execute arbitrary c…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05057 · Published 2012-07-13 · Fixed CWE-189
Priority LOW 38
The exif_data_load_data function in exif-data.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive informati…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.06272 · Published 2012-07-13 · Fixed CWE-119
Priority LOW 35
The exif_convert_utf16_to_utf8 function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive i…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03803 · Published 2012-07-13 · Fixed CWE-119
Priority LOW 35
The exif_entry_get_value function in exif-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (out-of-bounds read) or possibly obtain sensitive informa…
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03891 · Published 2012-07-13 · Fixed CWE-119
Priority LOW 29
The mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry.c in the EXIF Tag Parsing Library (aka libexif) before 0.6.21 allows remote attackers to cause a denial of service (divide-by-zero error) via an i…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03891 · Published 2012-07-13 · Fixed CWE-189
THREATIST.IORead the docs