Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2020:1534-1 Moderate: Libexif Denial of Service and More

suse
Calendar Grey June 4, 2020
Dist Suse Esm H88
SUSE releases patch for libexif addressing 9 vulnerabilities. Moderate threat levels resolved for multiple products.
An update that fixes 9 vulnerabilities is now available

Summary

This update for libexif fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893). - CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943). - CVE-2019-9278: Fixed an integer overflow (bsc#1160770). - CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847). - CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475). - CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121). - CVE-2020-13113: Fixed a potential use of uninitialized memory

Topics%20covered

Topics Covered

security advisory moderate denial of service integer overflow SUSE libexif buffer overread

References

#1055857 #1059893 #1120943 #1160770 #1171475

#1171847 #1172105 #1172116 #1172121

Cross- CVE-2016-6328 CVE-2017-7544 CVE-2018-20030

CVE-2019-9278 CVE-2020-0093 CVE-2020-12767

CVE-2020-13112 CVE-2020-13113 CVE-2020-13114

Affected Products:

SUSE OpenStack Cloud Crowbar 8

SUSE OpenStack Cloud 8

SUSE OpenStack Cloud 7

SUSE Linux Enterprise Software Development Kit 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP4

SUSE Linux Enterprise Server for SAP 12-SP3

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server 12-SP4

SUSE Linux Enterprise Server 12-SP3-LTSS

SUSE Linux Ent...

Read the Full Advisory

Announcement ID: SUSE-SU-2020:1534-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service integer overflow SUSE libexif buffer overread

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here