CVE-2020-13112

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-13112
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13112.json
Aliases
Related
Published
2020-05-21T16:15:10Z
Modified
2023-11-29T07:46:27.219334Z
Details

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.

References

Affected packages

Alpine:v3.10 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.11 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.12 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.8 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.9 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Git / github.com/libexif/exif

Affected ranges

Type
GIT
Repo
https://github.com/libexif/exif
Events
Introduced
0The exact introduced commit is unknown
Fixed
Type
GIT
Repo
https://github.com/libexif/libexif
Events
Introduced
0The exact introduced commit is unknown
Fixed

Affected versions

Other

cvs-migration
exif-0_6-release
exif-0_6_15-release
exif-0_6_17-release
exif-0_6_18-release
exif-0_6_19-release
exif-0_6_20-release
exif-0_6_21-release
exif-0_6_9-release
libexif-0_5_7-rc2
libexif-0_5_7-rc3
libexif-0_5_7-rc4
libexif-0_5_7-release
libexif-0_5_9-release
libexif-0_6_12-release
libexif-0_6_14-release
libexif-0_6_15-release
libexif-0_6_16-release
libexif-0_6_17-release
libexif-0_6_18-release
libexif-0_6_19-release
libexif-0_6_20-release
libexif-0_6_21-release
libexif-before-0_6_0-api-change