Wind River Support Network

HomeDefectsLIN9-9945

Fixed

LIN9-9945 : Security Advisory - libexif - CVE-2020-13114

Created: May 24, 2020 Updated: Jun 3, 2020

Resolved Date: Jun 3, 2020

Found In Version: 9.0.0.1

Fix Version: 9.0.0.25

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

CREATE(Triage):(User=admin) [CVE-2020-13114|https://nvd.nist.gov/vuln/detail/CVE-2020-13114]

CVEs

CVE-2020-13114