USN-4987-1

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/notices/USN-4987-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-4987-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-4987-1

Related

Published

2021-06-10T20:27:47.121282Z

Modified

2021-06-10T20:27:47.121282Z

Summary

libimage-exiftool-perl vulnerability

Details

It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code.

References

Affected packages

Ubuntu:18.04:LTS / libimage-exiftool-perl

Package

Name: libimage-exiftool-perl
Purl: pkg:deb/ubuntu/libimage-exiftool-perl@10.80-1ubuntu0.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.80-1ubuntu0.1

Affected versions

10.*

10.60-1

10.64-1

10.65-1

10.67-1

10.75-1

10.79-1

10.80-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "10.80-1ubuntu0.1",
            "binary_name": "libimage-exiftool-perl"
        }
    ]
}

Ubuntu:20.04:LTS / libimage-exiftool-perl

Package

Name: libimage-exiftool-perl
Purl: pkg:deb/ubuntu/libimage-exiftool-perl@11.88-1ubuntu0.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

11.88-1ubuntu0.1

Affected versions

11.*

11.65-1

11.70-1

11.74-1

11.75-1

11.76-1

11.77-1

11.78-1

11.79-1

11.80-1

11.87-1

11.88-1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "11.88-1ubuntu0.1",
            "binary_name": "libimage-exiftool-perl"
        }
    ]
}