Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Debian: DSA-1310-1 Low Risk: Integer Overflow in Libexif Can Cause DoS

debian
Calendar Grey June 16, 2007
Debian Logo
Improve libexif to fix integer overflow vulnerabilities that could lead to Denial of Service or code execution risks. Read more in Debian's latest security update
A vulnerability has been discovered in libexif, a library to parse EXIF files, which allows denial of service and possible execution of arbitary code via malformed EXIF data.
Topics%20covered

Topics Covered

security advisory denial of service code execution debian local issue integer overflow libexif

Summary


We recommend that you upgrade your libexif (0.6.13-5etch1) package.

Upgrade instructions
- --------------------wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian (stable)
- ---------------Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

Size/MD5 checksum: 611 1ef82262d96e0b157f7ee74bfad7cf1f
Size/MD5 checksum: 727418 e5ad93c170bfb4fed6dc3e1c7a7948cb
Size/MD5 checksum: 9163 476ae8f1ef4103144ca0f3ea59e88ca4

alpha architecture (DEC Alpha)

Size/MD5 checksum: 1067984 e5c33b25fd459761ea2d19d9142b5cdf
Si...

Read the Full Advisory

Severity
low
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service code execution debian local issue integer overflow libexif

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here