Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2020-0198

Опубликовано: 01 июн. 2020
Источник: redhat
CVSS3: 7.5
EPSS Средний

Описание

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5libexifOut of support scope
Red Hat Enterprise Linux 6libexifOut of support scope
Red Hat Enterprise Linux 7libexifWill not fix
Red Hat Enterprise Linux 8libexifFixedRHSA-2020:476604.11.2020

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-190->CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1847133libexif: integer overflow in exif_data_load_data_content function in exif-data.c

EPSS

Процентиль: 93%
0.11111
Средний

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 5 лет назад

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941

CVSS3: 7.5
nvd
больше 5 лет назад

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941

CVSS3: 7.5
debian
больше 5 лет назад

In exif_data_load_data_content of exif-data.c, there is a possible UBS ...

CVSS3: 7.5
github
больше 3 лет назад

In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-146428941

CVSS3: 7.5
fstec
больше 5 лет назад

Уязвимость фунции exif_data_load_data_content (exif-data.c) операционной системы Android, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 93%
0.11111
Средний

7.5 High

CVSS3