{"schemaVersion":3,"id":"USN-4277-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"libexif vulnerabilities\n\nLiu Bingchang discovered that libexif incorrectly handled certain files.\nAn attacker could possibly use this issue to access sensitive information or\ncause a denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and\nUbuntu 16.04 LTS. (CVE-2016-6328)\n\nLili Xu and Bingchang Liu discovered that libexif incorrectly handled certain files.\nAn attacker could possibly use this issue to access sensitive information or cause\na denial of service. This issue only affected Ubuntu 12.04 ESM, Ubuntu 14.04 ESM and\nUbuntu 16.04 LTS. (CVE-2017-7544)\n\nIt was discovered that libexif incorrectly handled certain files. An attacker could\npossibly use this issue to execute arbitrary code. (CVE-2019-9278)","dates":{"published":"2020-02-11T16:48:04.000Z","modified":"2026-06-29T13:47:57.465Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"libexif","name":"libexif","label":"libexif","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libexif","purlType":"deb","versions":[{"text":"< 0.6.21-1ubuntu1+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.6.21-2ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 0.6.21-4ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.6.21-1ubuntu1+esm1 | < 0.6.21-2ubuntu0.1 | < 0.6.21-4ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-4277-1","label":"ubuntu.com/security/notices/USN-4277-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-6328","label":"ubuntu.com/security/CVE-2016-6328","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7544","label":"ubuntu.com/security/CVE-2017-7544","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-9278","label":"ubuntu.com/security/CVE-2019-9278","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2016-6328","CVE-2017-7544","CVE-2019-9278"],"downstream":[],"duplicates":[],"related":["CVE-2016-6328","CVE-2017-7544","CVE-2019-9278"]},"timeline":[{"kind":"published","date":"2020-02-11T16:48:04.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-29T13:47:57.465Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:20:12.030Z","stale":false,"partial":false}}