Out-of-bounds read in libexif - CVE-2017-7544
Published: June 17, 2020
Vulnerability identifier: #VU29110
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-7544
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to improper length computation of the allocated data of an ExifMnote entry within the exif_data_save_data_entry() function in libexif/exif-data.c. A remote attacker can create a specially crafted file, trick the victim into opening it, trigger out-of-bounds read error and read contents of memory on the system.
Affected software
libexif
libexif (Alpine package)
libexif
Slackware Linux
Opensuse
Fedora
libexif (Alpine package)
libexif
Slackware Linux
Opensuse
Fedora
How to mitigate CVE-2017-7544
Install updates from vendor's website.
libexif - update to 0.6.22
libexif (Alpine package) - addressed in versions 0.6.21-r2, 0.6.21-r3
libexif - addressed in versions 0.6.22-1.fc31, 0.6.22-1.fc32
libexif (Alpine package) - addressed in versions 0.6.21-r2, 0.6.21-r3
libexif - addressed in versions 0.6.22-1.fc31, 0.6.22-1.fc32