CVE-2020-13114

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-13114
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13114.json
Related
Published
2020-05-21T16:15:10Z
Modified
2023-11-29T07:46:24.775267Z
Details

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

References

Affected packages

Alpine:v3.10 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.11 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.12 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.8 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Alpine:v3.9 / libexif

Package

Name
libexif

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.6.22-r0

Affected versions

0.*

0.6.17-r0
0.6.19-r0
0.6.19-r1
0.6.19-r2
0.6.19-r3
0.6.20-r0
0.6.20-r1
0.6.21-r0
0.6.21-r1
0.6.21-r2
0.6.21-r3

Git / github.com/libexif/exif

Affected ranges

Type
GIT
Repo
https://github.com/libexif/exif
Events
Introduced
0The exact introduced commit is unknown
Fixed
Type
GIT
Repo
https://github.com/libexif/libexif
Events
Introduced
0The exact introduced commit is unknown
Fixed

Affected versions

Other

cvs-migration
exif-0_6-release
exif-0_6_15-release
exif-0_6_17-release
exif-0_6_18-release
exif-0_6_19-release
exif-0_6_20-release
exif-0_6_21-release
exif-0_6_9-release
libexif-0_5_7-rc2
libexif-0_5_7-rc3
libexif-0_5_7-rc4
libexif-0_5_7-release
libexif-0_5_9-release
libexif-0_6_12-release
libexif-0_6_14-release
libexif-0_6_15-release
libexif-0_6_16-release
libexif-0_6_17-release
libexif-0_6_18-release
libexif-0_6_19-release
libexif-0_6_20-release
libexif-0_6_21-release
libexif-before-0_6_0-api-change