Описание
Security update for libexif
This update for libexif fixes the following issues:
- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).
- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
libexif-devel-0.6.21-lp151.4.3.1
libexif-devel-32bit-0.6.21-lp151.4.3.1
libexif12-0.6.21-lp151.4.3.1
libexif12-32bit-0.6.21-lp151.4.3.1
Ссылки
- E-Mail link for openSUSE-SU-2020:0264-1
- SUSE Security Ratings
- SUSE Bug 1120943
- SUSE Bug 1160770
- SUSE CVE CVE-2018-20030 page
- SUSE CVE CVE-2019-9278 page
Описание
An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.
Затронутые продукты
openSUSE Leap 15.1:libexif-devel-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif-devel-32bit-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif12-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif12-32bit-0.6.21-lp151.4.3.1
Ссылки
- CVE-2018-20030
- SUSE Bug 1120943
Описание
In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774
Затронутые продукты
openSUSE Leap 15.1:libexif-devel-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif-devel-32bit-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif12-0.6.21-lp151.4.3.1
openSUSE Leap 15.1:libexif12-32bit-0.6.21-lp151.4.3.1
Ссылки
- CVE-2019-9278
- SUSE Bug 1160770