CVE-2021-27815: Null Pointer Dereference
NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-27815?
CVE-2021-27815 is a vulnerability that allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the exif command line tool to crash.
What software is affected by CVE-2021-27815?
The Libexif Project Exif version 0.6.22 and earlier, as well as Fedora versions 32, 33, and 34, are affected by CVE-2021-27815.
How severe is CVE-2021-27815?
CVE-2021-27815 has a severity rating of 5.5, which is classified as medium.
How can I fix CVE-2021-27815?
To fix CVE-2021-27815, update to a version of exif that includes the following commits: eb84b0e3c5f2a86013b6fcfb800d187896a648fa and f6334d9d32437ef13dc902f0a88a2be0063d9d1c.
What is the Common Weakness Enumeration (CWE) for CVE-2021-27815?
The Common Weakness Enumeration (CWE) for CVE-2021-27815 is CWE-476: NULL Pointer Dereference.