【安全公告:UTSA-2023-000158】-【CVE-2022-3756】

发布日期:2023-01-19

基本信息

漏洞编号: CVE-2022-3756

受影响系统版本: 服务器D版

受影响源码包: exiv2

修复版本: 0.25.8-deepin1

CWE编号: CWE-189

漏洞等级: 高危

CVSS_v3评分: 8.8

漏洞描述

A vulnerability was found in Exiv2. It has been classified as critical. Affected is the function QuickTimeVideo::userDataDecoder of the file quicktimevideo.cpp of the component QuickTime Video Handler. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The name of the patch is bf4f28b727bdedbd7c88179c30d360e54568a62e. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212496.

修复方式

sudo apt update && sudo apt dist-upgrade

是否受影响判断

判断方法:apt policy PackageName
结果说明:版本小于修复版本,则受此漏洞影响,版本大于等于修复版本,则此漏洞已修复。

补丁链接

暂无