csaf_suse - suse-su-2020:1534-1

Vulnerability from csaf_suse

Published

2020-06-04 08:35

Modified

2020-06-04 08:35

Summary

Security update for libexif

Notes

Title of the patch

Security update for libexif

Description of the patch

This update for libexif fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893). - CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943). - CVE-2019-9278: Fixed an integer overflow (bsc#1160770). - CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847). - CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475). - CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121). - CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105). - CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116). Non-security issues fixed: - libexif was updated to version 0.6.22: * New translations: ms * Updated translations for most languages * Some useful EXIF 2.3 tag added: * EXIF_TAG_GAMMA * EXIF_TAG_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE * EXIF_TAG_GPS_H_POSITIONING_ERROR * EXIF_TAG_CAMERA_OWNER_NAME * EXIF_TAG_BODY_SERIAL_NUMBER * EXIF_TAG_LENS_SPECIFICATION * EXIF_TAG_LENS_MAKE * EXIF_TAG_LENS_MODEL * EXIF_TAG_LENS_SERIAL_NUMBER

Patchnames

HPE-Helion-OpenStack-8-2020-1534,SUSE-2020-1534,SUSE-OpenStack-Cloud-7-2020-1534,SUSE-OpenStack-Cloud-8-2020-1534,SUSE-OpenStack-Cloud-Crowbar-8-2020-1534,SUSE-SLE-SAP-12-SP1-2020-1534,SUSE-SLE-SAP-12-SP2-2020-1534,SUSE-SLE-SAP-12-SP3-2020-1534,SUSE-SLE-SDK-12-SP4-2020-1534,SUSE-SLE-SDK-12-SP5-2020-1534,SUSE-SLE-SERVER-12-SP1-2020-1534,SUSE-SLE-SERVER-12-SP2-2020-1534,SUSE-SLE-SERVER-12-SP2-BCL-2020-1534,SUSE-SLE-SERVER-12-SP3-2020-1534,SUSE-SLE-SERVER-12-SP3-BCL-2020-1534,SUSE-SLE-SERVER-12-SP4-2020-1534,SUSE-SLE-SERVER-12-SP5-2020-1534,SUSE-Storage-5-2020-1534

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for libexif",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for libexif fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857).\n- CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893).\n- CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943).\n- CVE-2019-9278: Fixed an integer overflow (bsc#1160770).\n- CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847).\n- CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475).\n- CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121).\n- CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105).\n- CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116).\n\nNon-security issues fixed:\n\n- libexif was updated to version 0.6.22:\n  * New translations: ms\n  * Updated translations for most languages\n  * Some useful EXIF 2.3 tag added:\n    * EXIF_TAG_GAMMA\n    * EXIF_TAG_COMPOSITE_IMAGE\n    * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE\n    * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE\n    * EXIF_TAG_GPS_H_POSITIONING_ERROR\n    * EXIF_TAG_CAMERA_OWNER_NAME\n    * EXIF_TAG_BODY_SERIAL_NUMBER\n    * EXIF_TAG_LENS_SPECIFICATION\n    * EXIF_TAG_LENS_MAKE\n    * EXIF_TAG_LENS_MODEL\n    * EXIF_TAG_LENS_SERIAL_NUMBER\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "HPE-Helion-OpenStack-8-2020-1534,SUSE-2020-1534,SUSE-OpenStack-Cloud-7-2020-1534,SUSE-OpenStack-Cloud-8-2020-1534,SUSE-OpenStack-Cloud-Crowbar-8-2020-1534,SUSE-SLE-SAP-12-SP1-2020-1534,SUSE-SLE-SAP-12-SP2-2020-1534,SUSE-SLE-SAP-12-SP3-2020-1534,SUSE-SLE-SDK-12-SP4-2020-1534,SUSE-SLE-SDK-12-SP5-2020-1534,SUSE-SLE-SERVER-12-SP1-2020-1534,SUSE-SLE-SERVER-12-SP2-2020-1534,SUSE-SLE-SERVER-12-SP2-BCL-2020-1534,SUSE-SLE-SERVER-12-SP3-2020-1534,SUSE-SLE-SERVER-12-SP3-BCL-2020-1534,SUSE-SLE-SERVER-12-SP4-2020-1534,SUSE-SLE-SERVER-12-SP5-2020-1534,SUSE-Storage-5-2020-1534",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1534-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2020:1534-1",
            url: "https://www.suse.com/support/update/announcement/2020/suse-su-20201534-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2020:1534-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2020-June/006884.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1055857",
            url: "https://bugzilla.suse.com/1055857",
         },
         {
            category: "self",
            summary: "SUSE Bug 1059893",
            url: "https://bugzilla.suse.com/1059893",
         },
         {
            category: "self",
            summary: "SUSE Bug 1120943",
            url: "https://bugzilla.suse.com/1120943",
         },
         {
            category: "self",
            summary: "SUSE Bug 1160770",
            url: "https://bugzilla.suse.com/1160770",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171475",
            url: "https://bugzilla.suse.com/1171475",
         },
         {
            category: "self",
            summary: "SUSE Bug 1171847",
            url: "https://bugzilla.suse.com/1171847",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172105",
            url: "https://bugzilla.suse.com/1172105",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172116",
            url: "https://bugzilla.suse.com/1172116",
         },
         {
            category: "self",
            summary: "SUSE Bug 1172121",
            url: "https://bugzilla.suse.com/1172121",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-6328 page",
            url: "https://www.suse.com/security/cve/CVE-2016-6328/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-7544 page",
            url: "https://www.suse.com/security/cve/CVE-2017-7544/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-20030 page",
            url: "https://www.suse.com/security/cve/CVE-2018-20030/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9278 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9278/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-0093 page",
            url: "https://www.suse.com/security/cve/CVE-2020-0093/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-12767 page",
            url: "https://www.suse.com/security/cve/CVE-2020-12767/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13112 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13112/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13113 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13113/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-13114 page",
            url: "https://www.suse.com/security/cve/CVE-2020-13114/",
         },
      ],
      title: "Security update for libexif",
      tracking: {
         current_release_date: "2020-06-04T08:35:43Z",
         generator: {
            date: "2020-06-04T08:35:43Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2020:1534-1",
         initial_release_date: "2020-06-04T08:35:43Z",
         revision_history: [
            {
               date: "2020-06-04T08:35:43Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.aarch64",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.aarch64",
                           product_id: "libexif-devel-0.6.22-8.9.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.aarch64",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.aarch64",
                           product_id: "libexif12-0.6.22-8.9.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif12-64bit-0.6.22-8.9.1.aarch64_ilp32",
                        product: {
                           name: "libexif12-64bit-0.6.22-8.9.1.aarch64_ilp32",
                           product_id: "libexif12-64bit-0.6.22-8.9.1.aarch64_ilp32",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64_ilp32",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.i586",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.i586",
                           product_id: "libexif-devel-0.6.22-8.9.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.i586",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.i586",
                           product_id: "libexif12-0.6.22-8.9.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.ppc64le",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.ppc64le",
                           product_id: "libexif-devel-0.6.22-8.9.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.ppc64le",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.ppc64le",
                           product_id: "libexif12-0.6.22-8.9.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.s390",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.s390",
                           product_id: "libexif-devel-0.6.22-8.9.1.s390",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.s390",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.s390",
                           product_id: "libexif12-0.6.22-8.9.1.s390",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.s390x",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.s390x",
                           product_id: "libexif-devel-0.6.22-8.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.s390x",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.s390x",
                           product_id: "libexif12-0.6.22-8.9.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-32bit-0.6.22-8.9.1.s390x",
                        product: {
                           name: "libexif12-32bit-0.6.22-8.9.1.s390x",
                           product_id: "libexif12-32bit-0.6.22-8.9.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "libexif12-0.6.22-8.9.1.x86_64",
                        product: {
                           name: "libexif12-0.6.22-8.9.1.x86_64",
                           product_id: "libexif12-0.6.22-8.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif12-32bit-0.6.22-8.9.1.x86_64",
                        product: {
                           name: "libexif12-32bit-0.6.22-8.9.1.x86_64",
                           product_id: "libexif12-32bit-0.6.22-8.9.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "libexif-devel-0.6.22-8.9.1.x86_64",
                        product: {
                           name: "libexif-devel-0.6.22-8.9.1.x86_64",
                           product_id: "libexif-devel-0.6.22-8.9.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "HPE Helion OpenStack 8",
                        product: {
                           name: "HPE Helion OpenStack 8",
                           product_id: "HPE Helion OpenStack 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:hpe-helion-openstack:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 7",
                        product: {
                           name: "SUSE OpenStack Cloud 7",
                           product_id: "SUSE OpenStack Cloud 7",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:7",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud 8",
                        product: {
                           name: "SUSE OpenStack Cloud 8",
                           product_id: "SUSE OpenStack Cloud 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE OpenStack Cloud Crowbar 8",
                        product: {
                           name: "SUSE OpenStack Cloud Crowbar 8",
                           product_id: "SUSE OpenStack Cloud Crowbar 8",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-openstack-cloud-crowbar:8",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP4",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-sdk:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP1-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP1-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp1",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP2-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp2",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_id: "SUSE Linux Enterprise Server 12 SP3-BCL",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-bcl:12:sp3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP4",
                           product_id: "SUSE Linux Enterprise Server 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server 12 SP5",
                           product_id: "SUSE Linux Enterprise Server 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:12:sp5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Enterprise Storage 5",
                        product: {
                           name: "SUSE Enterprise Storage 5",
                           product_id: "SUSE Enterprise Storage 5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:ses:5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of HPE Helion OpenStack 8",
               product_id: "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "HPE Helion OpenStack 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of HPE Helion OpenStack 8",
               product_id: "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "HPE Helion OpenStack 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud 7",
               product_id: "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 7",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud 8",
               product_id: "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud 8",
               product_id: "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
               product_id: "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
               product_id: "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE OpenStack Cloud Crowbar 8",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif-devel-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
               product_id: "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif-devel-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Software Development Kit 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP1-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP2-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-LTSS",
               product_id: "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3-BCL",
               product_id: "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP3-BCL",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
               product_id: "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
               product_id: "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
            },
            product_reference: "libexif12-0.6.22-8.9.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.aarch64 as component of SUSE Enterprise Storage 5",
               product_id: "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.aarch64",
            relates_to_product_reference: "SUSE Enterprise Storage 5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-0.6.22-8.9.1.x86_64 as component of SUSE Enterprise Storage 5",
               product_id: "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Enterprise Storage 5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "libexif12-32bit-0.6.22-8.9.1.x86_64 as component of SUSE Enterprise Storage 5",
               product_id: "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
            },
            product_reference: "libexif12-32bit-0.6.22-8.9.1.x86_64",
            relates_to_product_reference: "SUSE Enterprise Storage 5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-6328",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-6328",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-6328",
               url: "https://www.suse.com/security/cve/CVE-2016-6328",
            },
            {
               category: "external",
               summary: "SUSE Bug 1055857 for CVE-2016-6328",
               url: "https://bugzilla.suse.com/1055857",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-6328",
      },
      {
         cve: "CVE-2017-7544",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-7544",
            },
         ],
         notes: [
            {
               category: "general",
               text: "libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-7544",
               url: "https://www.suse.com/security/cve/CVE-2017-7544",
            },
            {
               category: "external",
               summary: "SUSE Bug 1059893 for CVE-2017-7544",
               url: "https://bugzilla.suse.com/1059893",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "low",
            },
         ],
         title: "CVE-2017-7544",
      },
      {
         cve: "CVE-2018-20030",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-20030",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-20030",
               url: "https://www.suse.com/security/cve/CVE-2018-20030",
            },
            {
               category: "external",
               summary: "SUSE Bug 1120943 for CVE-2018-20030",
               url: "https://bugzilla.suse.com/1120943",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 3.3,
                  baseSeverity: "LOW",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.0",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "low",
            },
         ],
         title: "CVE-2018-20030",
      },
      {
         cve: "CVE-2019-9278",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9278",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9278",
               url: "https://www.suse.com/security/cve/CVE-2019-9278",
            },
            {
               category: "external",
               summary: "SUSE Bug 1160770 for CVE-2019-9278",
               url: "https://bugzilla.suse.com/1160770",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.3,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "important",
            },
         ],
         title: "CVE-2019-9278",
      },
      {
         cve: "CVE-2020-0093",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-0093",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-0093",
               url: "https://www.suse.com/security/cve/CVE-2020-0093",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171847 for CVE-2020-0093",
               url: "https://bugzilla.suse.com/1171847",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172116 for CVE-2020-0093",
               url: "https://bugzilla.suse.com/1172116",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-0093",
      },
      {
         cve: "CVE-2020-12767",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-12767",
            },
         ],
         notes: [
            {
               category: "general",
               text: "exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-12767",
               url: "https://www.suse.com/security/cve/CVE-2020-12767",
            },
            {
               category: "external",
               summary: "SUSE Bug 1171475 for CVE-2020-12767",
               url: "https://bugzilla.suse.com/1171475",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "moderate",
            },
         ],
         title: "CVE-2020-12767",
      },
      {
         cve: "CVE-2020-13112",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13112",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13112",
               url: "https://www.suse.com/security/cve/CVE-2020-13112",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172116 for CVE-2020-13112",
               url: "https://bugzilla.suse.com/1172116",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.1,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "critical",
            },
         ],
         title: "CVE-2020-13112",
      },
      {
         cve: "CVE-2020-13113",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13113",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13113",
               url: "https://www.suse.com/security/cve/CVE-2020-13113",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172105 for CVE-2020-13113",
               url: "https://bugzilla.suse.com/1172105",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.2,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "important",
            },
         ],
         title: "CVE-2020-13113",
      },
      {
         cve: "CVE-2020-13114",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-13114",
            },
         ],
         notes: [
            {
               category: "general",
               text: "An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
               "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
               "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
               "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
               "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-13114",
               url: "https://www.suse.com/security/cve/CVE-2020-13114",
            },
            {
               category: "external",
               summary: "SUSE Bug 1172121 for CVE-2020-13114",
               url: "https://bugzilla.suse.com/1172121",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "HPE Helion OpenStack 8:libexif12-0.6.22-8.9.1.x86_64",
                  "HPE Helion OpenStack 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Enterprise Storage 5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Enterprise Storage 5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP1-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP2-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-BCL:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP3-LTSS:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Server for SAP Applications 12 SP5:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP4:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.aarch64",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.ppc64le",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.s390x",
                  "SUSE Linux Enterprise Software Development Kit 12 SP5:libexif-devel-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.s390x",
                  "SUSE OpenStack Cloud 7:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-0.6.22-8.9.1.x86_64",
                  "SUSE OpenStack Cloud Crowbar 8:libexif12-32bit-0.6.22-8.9.1.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2020-06-04T08:35:43Z",
               details: "low",
            },
         ],
         title: "CVE-2020-13114",
      },
   ],
}

cve-2020-13112

Vulnerability from cvelistv5

Published

2020-05-21 15:56

Modified

2024-08-04 12:11

Severity ?

Summary

An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.

References

▼	URL	Tags
	https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4396-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:11:19.027Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1",
               },
               {
                  name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "USN-4396-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4396-1/",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:15",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1",
            },
            {
               name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "USN-4396-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4396-1/",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13112",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1",
                     refsource: "MISC",
                     url: "https://github.com/libexif/libexif/commit/435e21f05001fb03f9f186fa7cbc69454afd00d1",
                  },
                  {
                     name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "USN-4396-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4396-1/",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13112",
      datePublished: "2020-05-21T15:56:28",
      dateReserved: "2020-05-16T00:00:00",
      dateUpdated: "2024-08-04T12:11:19.027Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-0093

Vulnerability from cvelistv5

Published

2020-05-14 20:10

Modified

2024-08-04 05:47

Severity ?

Summary

In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132

References

▼	URL	Tags
	https://source.android.com/security/bulletin/2020-05-01	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4396-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	Android	Version: Android-8.0 Android-8.1 Android-9 Android-10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T05:47:40.659Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/2020-05-01",
               },
               {
                  name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "USN-4396-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4396-1/",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Android",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Android-8.0 Android-8.1 Android-9 Android-10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Information disclosure",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:13",
            orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
            shortName: "google_android",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://source.android.com/security/bulletin/2020-05-01",
            },
            {
               name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "USN-4396-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4396-1/",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@android.com",
               ID: "CVE-2020-0093",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Android",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Android-8.0 Android-8.1 Android-9 Android-10",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-148705132",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Information disclosure",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://source.android.com/security/bulletin/2020-05-01",
                     refsource: "MISC",
                     url: "https://source.android.com/security/bulletin/2020-05-01",
                  },
                  {
                     name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "USN-4396-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4396-1/",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
      assignerShortName: "google_android",
      cveId: "CVE-2020-0093",
      datePublished: "2020-05-14T20:10:39",
      dateReserved: "2019-10-17T00:00:00",
      dateUpdated: "2024-08-04T05:47:40.659Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-7544

Vulnerability from cvelistv5

Published

2017-09-21 20:00

Modified

2024-08-05 16:04

Severity ?

Summary

libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.

References

▼	URL	Tags
	https://sourceforge.net/p/libexif/bugs/130/	x_refsource_MISC
	https://usn.ubuntu.com/4277-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Red Hat, Inc.	libexif	Version: through 0.6.21

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T16:04:12.004Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://sourceforge.net/p/libexif/bugs/130/",
               },
               {
                  name: "USN-4277-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4277-1/",
               },
               {
                  name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "libexif",
               vendor: "Red Hat, Inc.",
               versions: [
                  {
                     status: "affected",
                     version: "through 0.6.21",
                  },
               ],
            },
         ],
         datePublic: "2017-08-14T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c caused by improper length computation of the allocated data of an ExifMnote entry which can cause denial-of-service or possibly information disclosure.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-125",
                     description: "CWE-125",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-06-11T14:06:12",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://sourceforge.net/p/libexif/bugs/130/",
            },
            {
               name: "USN-4277-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4277-1/",
            },
            {
               name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2017-7544",
      datePublished: "2017-09-21T20:00:00Z",
      dateReserved: "2017-04-05T00:00:00",
      dateUpdated: "2024-08-05T16:04:12.004Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-6328

Vulnerability from cvelistv5

Published

2018-10-31 21:00

Modified

2024-08-06 01:29

Severity ?

6.1 (Medium) - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L

Summary

A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).

References

▼	URL	Tags
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328	x_refsource_CONFIRM
	https://usn.ubuntu.com/4277-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	[UNKNOWN]	libexif	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T01:29:19.973Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328",
               },
               {
                  name: "USN-4277-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4277-1/",
               },
               {
                  name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "libexif",
               vendor: "[UNKNOWN]",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2017-07-25T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can cause Denial-of-Service (DoS) and Information Disclosure (disclosing some critical heap chunk metadata, even other applications' private data).",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "LOW",
                  baseScore: 6.1,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-190",
                     description: "CWE-190",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:17",
            orgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
            shortName: "redhat",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-6328",
            },
            {
               name: "USN-4277-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4277-1/",
            },
            {
               name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "53f830b8-0a3f-465b-8143-3b8a9948e749",
      assignerShortName: "redhat",
      cveId: "CVE-2016-6328",
      datePublished: "2018-10-31T21:00:00",
      dateReserved: "2016-07-26T00:00:00",
      dateUpdated: "2024-08-06T01:29:19.973Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13113

Vulnerability from cvelistv5

Published

2020-05-21 16:03

Modified

2024-08-04 12:11

Severity ?

Summary

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.

References

▼	URL	Tags
	https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4396-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:11:19.105Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f",
               },
               {
                  name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "USN-4396-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4396-1/",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:17",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f",
            },
            {
               name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "USN-4396-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4396-1/",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13113",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f",
                     refsource: "MISC",
                     url: "https://github.com/libexif/libexif/commit/ec412aa4583ad71ecabb967d3c77162760169d1f",
                  },
                  {
                     name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "USN-4396-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4396-1/",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13113",
      datePublished: "2020-05-21T16:03:03",
      dateReserved: "2020-05-16T00:00:00",
      dateUpdated: "2024-08-04T12:11:19.105Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-13114

Vulnerability from cvelistv5

Published

2020-05-21 15:50

Modified

2024-08-04 12:11

Severity ?

Summary

An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.

References

▼	URL	Tags
	https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab	x_refsource_MISC
	https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://usn.ubuntu.com/4396-1/	vendor-advisory, x_refsource_UBUNTU
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:11:18.798Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab",
               },
               {
                  name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "USN-4396-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4396-1/",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:15",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab",
            },
            {
               name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "USN-4396-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4396-1/",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-13114",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An issue was discovered in libexif before 0.6.22. An unrestricted size in handling Canon EXIF MakerNote data could lead to consumption of large amounts of compute time for decoding EXIF data.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab",
                     refsource: "MISC",
                     url: "https://github.com/libexif/libexif/commit/e6a38a1a23ba94d139b1fa2cd4519fdcfe3c9bab",
                  },
                  {
                     name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "USN-4396-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4396-1/",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-13114",
      datePublished: "2020-05-21T15:50:42",
      dateReserved: "2020-05-16T00:00:00",
      dateUpdated: "2024-08-04T12:11:18.798Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-20030

Vulnerability from cvelistv5

Published

2019-02-20 17:00

Modified

2024-09-17 01:01

Severity ?

Summary

An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.

References

▼	URL	Tags
	https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89	x_refsource_MISC
	https://secuniaresearch.flexerasoftware.com/secunia_research/2018-28/	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html	vendor-advisory, x_refsource_SUSE
	https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/4358-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Flexera Software LLC	libexif	Version: 0.6.21

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T11:51:18.314Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-28/",
               },
               {
                  name: "openSUSE-SU-2020:0264",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
               },
               {
                  name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
               },
               {
                  name: "USN-4358-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4358-1/",
               },
               {
                  name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "libexif",
               vendor: "Flexera Software LLC",
               versions: [
                  {
                     status: "affected",
                     version: "0.6.21",
                  },
               ],
            },
         ],
         datePublic: "2018-10-12T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "DoS (Denial of Service) via CPU resource exhaustion",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-06-11T14:06:06",
            orgId: "44d08088-2bea-4760-83a6-1e9be26b15ab",
            shortName: "flexera",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-28/",
            },
            {
               name: "openSUSE-SU-2020:0264",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
            },
            {
               name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
            },
            {
               name: "USN-4358-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4358-1/",
            },
            {
               name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "PSIRT-CNA@flexerasoftware.com",
               DATE_PUBLIC: "2018-10-12T00:00:00",
               ID: "CVE-2018-20030",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "libexif",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "0.6.21",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Flexera Software LLC",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "DoS (Denial of Service) via CPU resource exhaustion",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89",
                     refsource: "MISC",
                     url: "https://github.com/libexif/libexif/commit/6aa11df549114ebda520dde4cdaea2f9357b2c89",
                  },
                  {
                     name: "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-28/",
                     refsource: "MISC",
                     url: "https://secuniaresearch.flexerasoftware.com/secunia_research/2018-28/",
                  },
                  {
                     name: "openSUSE-SU-2020:0264",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
                  },
                  {
                     name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
                  },
                  {
                     name: "USN-4358-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4358-1/",
                  },
                  {
                     name: "[debian-lts-announce] 20200528 [SECURITY] [DLA 2222-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00025.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "44d08088-2bea-4760-83a6-1e9be26b15ab",
      assignerShortName: "flexera",
      cveId: "CVE-2018-20030",
      datePublished: "2019-02-20T17:00:00Z",
      dateReserved: "2018-12-10T00:00:00",
      dateUpdated: "2024-09-17T01:01:49.355Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2020-12767

Vulnerability from cvelistv5

Published

2020-05-09 20:17

Modified

2024-08-04 12:04

Severity ?

Summary

exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.

References

▼	URL	Tags
	https://github.com/libexif/libexif/issues/31	x_refsource_CONFIRM
	https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html	mailing-list, x_refsource_MLIST
	https://usn.ubuntu.com/4358-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T12:04:22.894Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/issues/31",
               },
               {
                  name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
               },
               {
                  name: "USN-4358-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4358-1/",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:16",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/libexif/libexif/issues/31",
            },
            {
               name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
            },
            {
               name: "USN-4358-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4358-1/",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2020-12767",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "exif_entry_get_value in exif-entry.c in libexif 0.6.21 has a divide-by-zero error.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/libexif/libexif/issues/31",
                     refsource: "CONFIRM",
                     url: "https://github.com/libexif/libexif/issues/31",
                  },
                  {
                     name: "[debian-lts-announce] 20200518 [SECURITY] [DLA 2214-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/05/msg00016.html",
                  },
                  {
                     name: "USN-4358-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4358-1/",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2020-12767",
      datePublished: "2020-05-09T20:17:00",
      dateReserved: "2020-05-09T00:00:00",
      dateUpdated: "2024-08-04T12:04:22.894Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-9278

Vulnerability from cvelistv5

Published

2019-09-27 18:05

Modified

2024-08-04 21:46

Severity ?

Summary

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774

References

▼	URL	Tags
	https://source.android.com/security/bulletin/android-10	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2019/10/25/17	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/10/27/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/11/07/1	mailing-list, x_refsource_MLIST
	https://www.debian.org/security/2020/dsa-4618	vendor-advisory, x_refsource_DEBIAN
	https://lists.debian.org/debian-lts-announce/2020/02/msg00007.html	mailing-list, x_refsource_MLIST
	https://seclists.org/bugtraq/2020/Feb/9	mailing-list, x_refsource_BUGTRAQ
	https://github.com/libexif/libexif/issues/26	x_refsource_CONFIRM
	https://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566	x_refsource_CONFIRM
	https://usn.ubuntu.com/4277-1/	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VA5BPQLOFXIZOOJHBYDU635Z5KLUMTDD/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO2VTHD7OLPJDCJBHKUQTBAHZOBBCF6X/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202007-05	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	Android	Version: Android-10

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T21:46:29.867Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/android-10",
               },
               {
                  name: "[oss-security] 20191025 Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/10/25/17",
               },
               {
                  name: "[oss-security] 20191026 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/10/27/1",
               },
               {
                  name: "[oss-security] 20191107 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/11/07/1",
               },
               {
                  name: "DSA-4618",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2020/dsa-4618",
               },
               {
                  name: "[debian-lts-announce] 20200210 [SECURITY] [DLA 2100-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/02/msg00007.html",
               },
               {
                  name: "20200210 [SECURITY] [DSA 4618-1] libexif security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2020/Feb/9",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/issues/26",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566",
               },
               {
                  name: "USN-4277-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4277-1/",
               },
               {
                  name: "openSUSE-SU-2020:0264",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
               },
               {
                  name: "openSUSE-SU-2020:0793",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
               },
               {
                  name: "FEDORA-2020-b4db792558",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VA5BPQLOFXIZOOJHBYDU635Z5KLUMTDD/",
               },
               {
                  name: "FEDORA-2020-085150ac6e",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO2VTHD7OLPJDCJBHKUQTBAHZOBBCF6X/",
               },
               {
                  name: "GLSA-202007-05",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-05",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Android",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "Android-10",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Remote code execution",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T00:06:14",
            orgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
            shortName: "google_android",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://source.android.com/security/bulletin/android-10",
            },
            {
               name: "[oss-security] 20191025 Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/10/25/17",
            },
            {
               name: "[oss-security] 20191026 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/10/27/1",
            },
            {
               name: "[oss-security] 20191107 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/11/07/1",
            },
            {
               name: "DSA-4618",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2020/dsa-4618",
            },
            {
               name: "[debian-lts-announce] 20200210 [SECURITY] [DLA 2100-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/02/msg00007.html",
            },
            {
               name: "20200210 [SECURITY] [DSA 4618-1] libexif security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2020/Feb/9",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/libexif/libexif/issues/26",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566",
            },
            {
               name: "USN-4277-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4277-1/",
            },
            {
               name: "openSUSE-SU-2020:0264",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
            },
            {
               name: "openSUSE-SU-2020:0793",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
            },
            {
               name: "FEDORA-2020-b4db792558",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VA5BPQLOFXIZOOJHBYDU635Z5KLUMTDD/",
            },
            {
               name: "FEDORA-2020-085150ac6e",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO2VTHD7OLPJDCJBHKUQTBAHZOBBCF6X/",
            },
            {
               name: "GLSA-202007-05",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-05",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@android.com",
               ID: "CVE-2019-9278",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Android",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "Android-10",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112537774",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Remote code execution",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://source.android.com/security/bulletin/android-10",
                     refsource: "MISC",
                     url: "https://source.android.com/security/bulletin/android-10",
                  },
                  {
                     name: "[oss-security] 20191025 Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/10/25/17",
                  },
                  {
                     name: "[oss-security] 20191026 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/10/27/1",
                  },
                  {
                     name: "[oss-security] 20191107 Re: Security fixes from Android 10 release which are relevant outside the Android ecosystem?",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/11/07/1",
                  },
                  {
                     name: "DSA-4618",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2020/dsa-4618",
                  },
                  {
                     name: "[debian-lts-announce] 20200210 [SECURITY] [DLA 2100-1] libexif security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/02/msg00007.html",
                  },
                  {
                     name: "20200210 [SECURITY] [DSA 4618-1] libexif security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2020/Feb/9",
                  },
                  {
                     name: "https://github.com/libexif/libexif/issues/26",
                     refsource: "CONFIRM",
                     url: "https://github.com/libexif/libexif/issues/26",
                  },
                  {
                     name: "https://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566",
                     refsource: "CONFIRM",
                     url: "https://github.com/libexif/libexif/commit/75aa73267fdb1e0ebfbc00369e7312bac43d0566",
                  },
                  {
                     name: "USN-4277-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4277-1/",
                  },
                  {
                     name: "openSUSE-SU-2020:0264",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00000.html",
                  },
                  {
                     name: "openSUSE-SU-2020:0793",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00017.html",
                  },
                  {
                     name: "FEDORA-2020-b4db792558",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VA5BPQLOFXIZOOJHBYDU635Z5KLUMTDD/",
                  },
                  {
                     name: "FEDORA-2020-085150ac6e",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO2VTHD7OLPJDCJBHKUQTBAHZOBBCF6X/",
                  },
                  {
                     name: "GLSA-202007-05",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-05",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6",
      assignerShortName: "google_android",
      cveId: "CVE-2019-9278",
      datePublished: "2019-09-27T18:05:14",
      dateReserved: "2019-02-28T00:00:00",
      dateUpdated: "2024-08-04T21:46:29.867Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature