Bug 783522 – <media-gfx/exif-0.6.22-r1: null pointer dereference (CVE-2021-27815)

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description John Helmert III 2021-04-17 23:52:28 UTC]

CVE-2021-27815:

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.

[addCollapseLink(1, 1, 'Toggle comment display'); Comment 1 NATTkA bot 2021-07-29 17:22:58 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(2, 1, 'Toggle comment display'); Comment 2 NATTkA bot 2021-07-29 17:31:17 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(3, 1, 'Toggle comment display'); Comment 3 NATTkA bot 2021-07-29 17:39:15 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(4, 1, 'Toggle comment display'); Comment 4 NATTkA bot 2021-07-29 17:47:23 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[addCollapseLink(5, 1, 'Toggle comment display'); Comment 5 NATTkA bot 2021-07-29 18:03:21 UTC Comment hidden (obsolete)]

Package list is empty or all packages have requested keywords.

[Comment 6 NATTkA bot 2021-07-29 18:11:38 UTC]

Package list is empty or all packages have requested keywords.

[Comment 7 Larry the Git Cow 2022-07-08 22:14:44 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bd33507695886a6e0936f556cf6ec9de7595e7f9

commit bd33507695886a6e0936f556cf6ec9de7595e7f9
Author:     Federico Denkena <[e-mail]>
AuthorDate: 2022-07-07 20:36:01 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2022-07-08 22:14:34 +0000

    media-gfx/exif: Security fix for CVE-2021-27815
    
    This commit adds two patches from upstream and bumps the revision.
    
    Bug: https://bugs.gentoo.org/783522
    Signed-off-by: Federico Denkena <[e-mail]>
    Signed-off-by: Sam James <[e-mail]>

 media-gfx/exif/exif-0.6.22-r1.ebuild               | 31 +++++++++++++++++
 .../files/exif-0.6.22-empty-string-check.patch     | 40 ++++++++++++++++++++++
 2 files changed, 71 insertions(+)

[Comment 8 Larry the Git Cow 2022-10-22 02:33:33 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=cccd68bec11001d70da69997730018e5151a7483

commit cccd68bec11001d70da69997730018e5151a7483
Author:     John Helmert III <[e-mail]>
AuthorDate: 2022-10-22 02:31:35 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-10-22 02:31:35 +0000

    media-gfx/exif: drop 0.6.22
    
    Bug: https://bugs.gentoo.org/783522
    Signed-off-by: John Helmert III <[e-mail]>

 media-gfx/exif/exif-0.6.22.ebuild | 27 ---------------------------
 1 file changed, 27 deletions(-)

[Comment 9 John Helmert III 2022-10-22 02:40:41 UTC]

GLSA request filed

[Comment 10 Larry the Git Cow 2022-10-31 01:41:37 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=72cd35ddebf893b0640052a4f1534e697700fc8f

commit 72cd35ddebf893b0640052a4f1534e697700fc8f
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2022-10-31 01:23:34 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2022-10-31 01:40:16 +0000

    [ GLSA 202210-28 ] exif: Denial of Service
    
    Bug: https://bugs.gentoo.org/783522
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 glsa-202210-28.xml | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)

[Comment 11 John Helmert III 2022-10-31 02:18:36 UTC]

GLSA released, all done!