Wind River Support Network

HomeDefectsLIN1018-6198

Fixed

LIN1018-6198 : Security Advisory - libexif - CVE-2020-13114

Created: May 24, 2020 Updated: May 13, 2022

Resolved Date: Jun 21, 2020

Found In Version: 10.18.44.1

Fix Version: 10.18.44.18

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

CREATE(Triage):(User=admin) CVE-2020-13114 (https://nvd.nist.gov/vuln/detail/CVE-2020-13114)

CVEs

CVE-2020-13114