Bugzilla – Bug 1172768
VUL-1: CVE-2020-0198: libexif: unsigned integer overflow
Last modified: 2022-08-03 09:19:23 UTC
not yet fixced in 0.6.22 release
CVE-2020-0198 An integer overflow was found in libexif. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-0198 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-0198.html https://github.com/libexif/libexif/commit/ce03ad7ef4e8aeefce79192bf5b6f69fae396f0c?diff=split https://android.googlesource.com/platform/external/libexif/+/1e187b62682ffab5003c702657d6d725b4278f16%5E%21/#F0
SUSE-SU-2022:1148-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1172768,1172802,1178479 CVE References: CVE-2020-0181,CVE-2020-0198,CVE-2020-0452 JIRA References: Sources used: openSUSE Leap 15.4 (src): libexif-0.6.22-150000.5.9.1 openSUSE Leap 15.3 (src): libexif-0.6.22-150000.5.9.1 SUSE Manager Server 4.1 (src): libexif-0.6.22-150000.5.9.1 SUSE Manager Retail Branch Server 4.1 (src): libexif-0.6.22-150000.5.9.1 SUSE Manager Proxy 4.1 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server for SAP 15-SP2 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server for SAP 15 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server 15-SP2-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server 15-SP2-BCL (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Server 15-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Realtime Extension 15-SP2 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP3 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP3 (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-SP2-ESPOS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): libexif-0.6.22-150000.5.9.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): libexif-0.6.22-150000.5.9.1 SUSE Enterprise Storage 7 (src): libexif-0.6.22-150000.5.9.1 SUSE Enterprise Storage 6 (src): libexif-0.6.22-150000.5.9.1 SUSE CaaS Platform 4.0 (src): libexif-0.6.22-150000.5.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2022:1168-1: An update that fixes three vulnerabilities is now available. Category: security (important) Bug References: 1172768,1172802,1178479 CVE References: CVE-2020-0181,CVE-2020-0198,CVE-2020-0452 JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): libexif-0.6.22-8.13.1 SUSE OpenStack Cloud Crowbar 8 (src): libexif-0.6.22-8.13.1 SUSE OpenStack Cloud 9 (src): libexif-0.6.22-8.13.1 SUSE OpenStack Cloud 8 (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server 12-SP5 (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): libexif-0.6.22-8.13.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): libexif-0.6.22-8.13.1 HPE Helion Openstack 8 (src): libexif-0.6.22-8.13.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
back to secteam
Closing, thanks.