Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-0181

Опубликовано: 01 июн. 2020
Источник: redhat
CVSS3: 8.2

Описание

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libexifOut of support scope
Red Hat Enterprise Linux 6libexifOut of support scope
Red Hat Enterprise Linux 7libexifWill not fix
Red Hat Enterprise Linux 8libexifFixedRHSA-2020:476604.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190
https://bugzilla.redhat.com/show_bug.cgi?id=1847131libexif: integer overflow in exif_data_load_data_thumbnail function in exif-data.c

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 6 лет назад

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076

CVSS3: 7.5
nvd
около 6 лет назад

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076

CVSS3: 7.5
debian
около 6 лет назад

In exif_data_load_data_thumbnail of exif-data.c, there is a possible d ...

CVSS3: 7.5
github
около 4 лет назад

In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-145075076

suse-cvrf
больше 4 лет назад

Security update for libexif

8.2 High

CVSS3