Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:0195-1

Опубликовано: 24 янв. 2018
Источник: suse-cvrf

Описание

Security update for libexif

This update for libexif fixes the following security issue:

  • CVE-2017-7544: Fixed out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure (bsc#1059893)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
libexif-0.6.17-2.14.3.1
libexif-32bit-0.6.17-2.14.3.1
libexif-x86-0.6.17-2.14.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
libexif-0.6.17-2.14.3.1
libexif-32bit-0.6.17-2.14.3.1
libexif-x86-0.6.17-2.14.3.1
SUSE Linux Enterprise Software Development Kit 11 SP4
libexif-devel-0.6.17-2.14.3.1

Ссылки

Описание

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:libexif-0.6.17-2.14.3.1
SUSE Linux Enterprise Server 11 SP4:libexif-32bit-0.6.17-2.14.3.1
SUSE Linux Enterprise Server 11 SP4:libexif-x86-0.6.17-2.14.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:libexif-0.6.17-2.14.3.1
Ссылки