Name of the Vulnerable Software and Affected Versions:
exif versions 0.6.22 and earlier
Description:
The issue allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash. This occurs when printing out XML formatted EXIF data using the exif command line tool.
Recommendations:
For exif versions 0.6.22 and earlier, consider updating to a version later than 0.6.22 to resolve the issue. As a temporary workaround, restrict the upload of JPEG files from untrusted sources to minimize the risk of exploitation.