Mageia 7: 2020-0273 Critical: Libexif Denial of Service Risk
mageia
July 4, 2020
The updated packages fix a security vulnerability: In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow
Summary
The updated packages fix a security vulnerability:
In exif_data_load_data_content of exif-data.c, there is a possible UBSAN
abort due to an integer overflow. This could lead to remote denial of
service with no additional execution privileges needed. User interaction
is needed for exploitation. (CVE-2020-0198)
References
- https://bugs.mageia.org/show_bug.cgi?id=26814
- https://lists.debian.org/debian-lts-announce/2020/06/msg00020.html
- https://ubuntu.com/security/notices/USN-4396-1
- https://www.cve.org/CVERecord?id=CVE-2020-0198
Resolution
SRPMS
- 7/core/libexif-0.6.22-1.1.mga7
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 04 Jul 2020
URL: https://advisories.mageia.org/MGASA-2020-0273.html
Type: security
CVE: CVE-2020-0198
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!