Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia: 2020-0426 Moderate: Libexif Out Of Bounds Write Threat

mageia
Calendar Grey November 15, 2020
Dist Mageia Esm H88
Mageia has released an update for libexif packages to fix a serious out-of-bounds write vulnerability, enhancing protections against remote code execution attacks
In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow

Summary

In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for exploitation. (CVE-2020-0452)

References

- https://bugs.mageia.org/show_bug.cgi?id=27592

- https://lists.debian.org/debian-security-announce/2020/msg00193.html

-

- https://www.cve.org/CVERecord?id=CVE-2020-0452

Topics%20covered

Topics Covered

security advisory security fix remote execution integer overflow out of bounds libexif Mageia

Resolution

SRPMS

- 7/core/libexif-0.6.22-1.2.mga7

Publication date: 15 Nov 2020
URL: https://advisories.mageia.org/MGASA-2020-0426.html
Type: security
CVE: CVE-2020-0452

Topics%20covered

Topics Covered

security advisory security fix remote execution integer overflow out of bounds libexif Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here