CVE-2017-7544 - OpenCVE

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:P/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Libexif Project	Libexif

Configuration 1 [-]

cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*

References

Link	Resource
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html
https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html
https://sourceforge.net/p/libexif/bugs/130/	Exploit Third Party Advisory
https://usn.ubuntu.com/4277-1/

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2017-09-21T20:00:00Z

Updated: 2020-06-11T14:06:12

Reserved: 2017-04-05T00:00:00

Link: CVE-2017-7544

JSON object: View

NVD Information

Status : Modified

Published: 2017-09-21T21:29:00.400

Modified: 2020-06-11T15:15:10.940

Link: CVE-2017-7544

JSON object: View

Redhat Information

No data.

CWE

CWE-125

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:libexif_project:libexif:*:*:*:*:*:*:*:*", "matchCriteriaId": "21034802-5B3C-4D89-819D-D0907E062D7D", "versionEndIncluding": "0.6.21", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure."}, {"lang": "es", "value": "libexif hasta la versi\u00f3n 0.6.21 es vulnerable a una lectura de la memoria din\u00e1mica (heap) fuera de l\u00edmites en la funci\u00f3n exif_data_save_data_entry en libexif/exif-data.c. Esto se debe al c\u00e1lculo incorrecto de la longitud de los datos asignados de una entrada ExifMnote que podr\u00edan provocar una denegaci\u00f3n de servicio o, posiblemente, una divulgaci\u00f3n de informaci\u00f3n."}], "id": "CVE-2017-7544", "lastModified": "2020-06-11T15:15:10.940", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-09-21T21:29:00.400", "references": [{"source": "secalert@redhat.com", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html"}, {"source": "secalert@redhat.com", "url": "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html"}, {"source": "secalert@redhat.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://sourceforge.net/p/libexif/bugs/130/"}, {"source": "secalert@redhat.com", "url": "https://usn.ubuntu.com/4277-1/"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "secalert@redhat.com", "type": "Secondary"}]}