Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2017-7544 PUBLISHED CVSS 9.100000381469727 CRITICAL

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

Risk Scores

CVSS v3.0
9.100000381469727
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.7libexif0, 0.6.21-r1, 0.6.21-r0
Alpine:v3.12libexif0.6.17-r0, 0, 0.6.21-r2
Alpine:v3.6libexif0.6.20-r1, 0.6.21-r1, 0.6.21-r0
Alpine:v3.5libexif0.6.21-r0, 0, 0.6.17-r0
Alpine:v3.8libexif0.6.20-r1, 0.6.21-r0, 0.6.21-r1
Alpine:v3.9libexif0.6.21-r2, 0, 0.6.17-r0
Alpine:v3.11libexif0, 0.6.21-r2, 0.6.21-r1
Alpine:v3.10libexif0, 0.6.21-r2, 0.6.21-r1

Timeline

References

Open in Interactive Console →