PT-2021-17628

CVE-2021-27815

·

Published

2021-04-14

·

Updated

2022-11-04

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: exif versions 0.6.22 and earlier
Description: The issue allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash. This occurs when printing out XML formatted EXIF data using the exif command line tool.
Recommendations: For exif versions 0.6.22 and earlier, consider updating to a version later than 0.6.22 to resolve the issue. As a temporary workaround, restrict the upload of JPEG files from untrusted sources to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
MGASA-2021-0252
Found an issue in the description? Have something to add? Feel free to write us 👾