CVE-2018-20030

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html
• lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
• libexif/libexif commit 6aa11df · Patch
• lists.debian.org/debian-lts-announce/2020/05/msg00016.html
• lists.debian.org/debian-lts-announce/2020/05/msg00025.html
• secuniaresearch.flexerasoftware.com/secunia_research/2018-28 · Third Party Advisory
• usn.ubuntu.com/4358-1

libexif のその他の脆弱性

• CVE-2026-40386高 7.1In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash…
• CVE-2026-40385高 7.1In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes …
• CVE-2026-32775高 7.8libexif through 0.6.25 has a flaw in decoding MakerNotes. If the exif_mnote_data_get_value function gets passed in a 0 size, the passed in-b…
• CVE-2020-0198高 7.5In exif_data_load_data_content of exif-data.c, there is a possible UBSAN abort due to an integer overflow. This could lead to remote denial …
• CVE-2020-0181高 7.5In exif_data_load_data_thumbnail of exif-data.c, there is a possible denial of service due to an integer overflow. This could lead to remote…