All errata/sisyphus/ALT-PU-2019-1112-1
ALT-PU-2019-1112-1

Package update libexempi in branch sisyphus

Version2.5.0-alt1
Task#219878
Published2019-01-24
Max severityHIGH
Severity:

Closed issues (2)

BDU:2020-04528
HIGH7.5

Уязвимость функции WEBP::GetLE32 утилиты «exempi», позволяющая нарушителю вызвать отказ в обслуживании

Published: 2020-10-07Modified: 2024-11-28
CVSS 3.xHIGH 7.5
CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0HIGH 7.1
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:C
References
CVE-2018-12648
HIGH7.5

The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointer dereference.

Published: 2018-06-22Modified: 2024-11-21
CVSS 2.0MEDIUM 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References