Bugzilla – Bug 1171847
VUL-0: CVE-2020-0093: libexif: out of bounds read due to an improper check might lead to local information disclosure
Last modified: 2022-10-21 14:21:11 UTC
CVE-2020-0093 In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132 References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-0093 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-0093.html
Tracked SLE10-SP3, SLE11, SLE12 and SLE15 as affected
This is an autogenerated message for OBS integration: This bug (1171847) was mentioned in https://build.opensuse.org/request/show/807015 Factory / libexif
SUSE-SU-2020:1534-1: An update that fixes 9 vulnerabilities is now available. Category: security (moderate) Bug References: 1055857,1059893,1120943,1160770,1171475,1171847,1172105,1172116,1172121 CVE References: CVE-2016-6328,CVE-2017-7544,CVE-2018-20030,CVE-2019-9278,CVE-2020-0093,CVE-2020-12767,CVE-2020-13112,CVE-2020-13113,CVE-2020-13114 Sources used: SUSE OpenStack Cloud Crowbar 8 (src): libexif-0.6.22-8.9.1 SUSE OpenStack Cloud 8 (src): libexif-0.6.22-8.9.1 SUSE OpenStack Cloud 7 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Software Development Kit 12-SP4 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server for SAP 12-SP2 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server for SAP 12-SP1 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP5 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP4 (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP2-LTSS (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): libexif-0.6.22-8.9.1 SUSE Linux Enterprise Server 12-SP1-LTSS (src): libexif-0.6.22-8.9.1 SUSE Enterprise Storage 5 (src): libexif-0.6.22-8.9.1 HPE Helion Openstack 8 (src): libexif-0.6.22-8.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
SUSE-SU-2020:1553-1: An update that fixes 9 vulnerabilities is now available. Category: security (moderate) Bug References: 1055857,1059893,1120943,1160770,1171475,1171847,1172105,1172116,1172121 CVE References: CVE-2016-6328,CVE-2017-7544,CVE-2018-20030,CVE-2019-9278,CVE-2020-0093,CVE-2020-12767,CVE-2020-13112,CVE-2020-13113,CVE-2020-13114 Sources used: SUSE Linux Enterprise Module for Desktop Applications 15-SP1 (src): libexif-0.6.22-5.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
openSUSE-SU-2020:0793-1: An update that fixes 9 vulnerabilities is now available. Category: security (moderate) Bug References: 1055857,1059893,1120943,1160770,1171475,1171847,1172105,1172116,1172121 CVE References: CVE-2016-6328,CVE-2017-7544,CVE-2018-20030,CVE-2019-9278,CVE-2020-0093,CVE-2020-12767,CVE-2020-13112,CVE-2020-13113,CVE-2020-13114 Sources used: openSUSE Leap 15.1 (src): libexif-0.6.22-lp151.4.6.1
SUSE-SU-2020:1553-2: An update that fixes 9 vulnerabilities is now available. Category: security (moderate) Bug References: 1055857,1059893,1120943,1160770,1171475,1171847,1172105,1172116,1172121 CVE References: CVE-2016-6328,CVE-2017-7544,CVE-2018-20030,CVE-2019-9278,CVE-2020-0093,CVE-2020-12767,CVE-2020-13112,CVE-2020-13113,CVE-2020-13114 Sources used: SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP2 (src): libexif-0.6.22-5.6.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 (src): libexif-0.6.22-5.6.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP2 (src): libexif-0.6.22-5.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
sle11 will not be done
all done