This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-27815 →

DEBIAN-CVE-2021-27815

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause...

Original description

The description as published by the source.

NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 exif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-3"}]}]

Debian:13 exif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-3"}]}]

Debian:14 exif

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.22-3"}]}]

References

advisory security-tracker.debian.org