Red Hat Security Advisory

RHSA-2020:4040

libexif security, bug fix, and enhancement update

Released 2020-09-29 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) libexif-0.6.22-1.el7
Red Hat Enterprise Linux Client Optional (v. 7) libexif-devel-0.6.22-1.el7, libexif-doc-0.6.22-1.el7
Red Hat Enterprise Linux ComputeNode Optional (v. 7) libexif-0.6.22-1.el7, libexif-devel-0.6.22-1.el7, libexif-doc-0.6.22-1.el7
Red Hat Enterprise Linux Server (v. 7) libexif-0.6.22-1.el7, libexif-0.6.22-1.el7.ppc
Red Hat Enterprise Linux Server Optional (v. 7) libexif-devel-0.6.22-1.el7, libexif-devel-0.6.22-1.el7.ppc, libexif-doc-0.6.22-1.el7
Red Hat Enterprise Linux Workstation (v. 7) libexif-0.6.22-1.el7
Red Hat Enterprise Linux Workstation Optional (v. 7) libexif-devel-0.6.22-1.el7, libexif-doc-0.6.22-1.el7

TI-2019-06731 CVE-2019-9278 · GHSA-wwvf-m6j5-65jw

MEDIUM 45

In libexif, there is a possible out of bounds write due to an integer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04059 Published 2019-09-27 Partial fix CWE-190

TI-2020-10307 CVE-2020-13113 · GHSA-v6jx-w33p-924c

LOW 39

An issue was discovered in libexif before 0.6.22.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.01934 Published 2020-05-21 Partial fix CWE-908

TI-2020-10308 CVE-2020-13114 · GHSA-mpfc-53hr-w2mg

LOW 37

An issue was discovered in libexif before 0.6.22.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02359 Published 2020-05-21 Partial fix CWE-770

TI-2020-00177 CVE-2020-0182 · GHSA-5mj9-pf4j-ccp7

LOW 31

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds read due to a missing bounds check.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01134 Published 2020-06-11 Partial fix CWE-125

TI-2020-10152 CVE-2020-12767 · GHSA-rwjh-wvc7-p2gm

LOW 25

exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00531 Published 2020-05-09 Partial fix CWE-369

TI-2020-00091 CVE-2020-0093 · GHSA-cr92-4pr9-789r

LOW 23

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00301 Published 2020-05-14 Partial fix CWE-125