FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-03-28 15:43:32 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
00f30cba-4d23-11ea-86ba-641c67a117d8libexif -- privilege escalation

Mitre reports:

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation.


Discovery 2019-02-06
Entry 2020-02-11
libexif
< 0.6.21_5

CVE-2019-9278
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9278
https://security-tracker.debian.org/tracker/CVE-2019-9278
https://seclists.org/bugtraq/2020/Feb/9
https://github.com/libexif/libexif/issues/26