CVE-2017-7544

Source
https://nvd.nist.gov/vuln/detail/CVE-2017-7544
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7544.json
Related
Published
2017-09-21T21:29:00Z
Modified
2023-11-29T06:23:09.780666Z
Details

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exifdatasavedataentry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

References

Affected packages

Alpine:v3.10 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r3

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2

Alpine:v3.11 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r3

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2

Alpine:v3.12 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r3

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2

Alpine:v3.5 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r2

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r1

Alpine:v3.6 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r2

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r1

Alpine:v3.7 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r2

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r1

Alpine:v3.8 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r3

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2

Alpine:v3.9 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.21-r3

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2

Git / github.com/libexif/exif

Affected ranges

Type
GIT
Repo
https://github.com/libexif/exif
Events
Introduced
0The exact introduced commit is unknown
Last affected
Type
GIT
Repo
https://github.com/libexif/libexif
Events
Introduced
0The exact introduced commit is unknown
Last affected

Affected versions

Other

exif-0_6-release
exif-0_6_15-release
exif-0_6_17-release
exif-0_6_18-release
exif-0_6_19-release
exif-0_6_20-release
exif-0_6_21-release
exif-0_6_9-release
libexif-0_5_7-rc2
libexif-0_5_7-rc3
libexif-0_5_7-rc4
libexif-0_5_7-release
libexif-0_5_9-release
libexif-0_6_12-release
libexif-0_6_14-release
libexif-0_6_15-release
libexif-0_6_16-release
libexif-0_6_17-release
libexif-0_6_18-release
libexif-0_6_19-release
libexif-0_6_20-release
libexif-0_6_21-release
libexif-before-0_6_0-api-change