CVE-2007-6351
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service ...
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
Exploit likelihood
What each source reports
NVD Score used
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
CVE-2007-6351- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
CVE-2007-6351- Updated
- 2026-11-02
EUVDEUVD-2007-6318 No score
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
EUVD-2007-6318- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4j78-c8h2-ff3f No score
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service ...
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
GHSA-4j78-c8h2-ff3f- Updated
- 2026-11-02
OSV No score
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
CVE-2007-6351- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6351 No score
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
- Record
DEBIAN-CVE-2007-6351- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10939-1 No score
libexif-devel-0.6.23-1.2 on GA media
These are all security issues fixed in the libexif-devel-0.6.23-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10939-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libexifDebian:12 |
before 0.6.16-2.1 | 0.6.16-2.1 |
libexifDebian:13 |
before 0.6.16-2.1 | 0.6.16-2.1 |
libexifDebian:14 |
before 0.6.16-2.1 | 0.6.16-2.1 |
libexifDebian:3.1 From an advisory covering 3 CVEs |
before 0.6.9-6sarge2, plus listed versions 0.6.9-60.6.9-6sarge1 |
0.6.9-6sarge2 |
libexifDebian:4.0 From an advisory covering 3 CVEs |
before 0.6.13-5etch2, plus listed versions 0.6.13-50.6.13-5etch1 |
0.6.13-5etch2 |
libexifRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexif-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexif-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexifRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexif-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libexifRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexif-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexif-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:0.6.13-4.0.2.el5_1.1 | 0:0.6.13-4.0.2.el5_1.1 |
libexifopenSUSE:Tumbleweed From an advisory covering 12 CVEs |
before 0.6.23-1.2 | 0.6.23-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6351 is a medium vulnerability (CVSS 4.3) in Libexif Project Libexif, published December 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 76th percentile. Fixed in libexif 0.6.16-2.1.
References
securityfocus.com/bid/26976
security.gentoo.org/glsa/glsa-200712-15.xml
issues.rpath.com/browse/RPL-2068
novell.com/linux/security/advisories/suse_security_summary_report.html
secunia.com/advisories/28195
bugzilla.redhat.com/show_bug.cgi?id=425631
Show 47 moreShow less
osvdb.org/42652
exchange.xforce.ibmcloud.com/vulnerabilities/39166
bugs.gentoo.org/show_bug.cgi?id=202350
redhat.com/archives/fedora-package-announce/2007-December/msg00597.html
securitytracker.com/id?1019124
vupen.com/english/advisories/2007/4278
debian.org/security/2008/dsa-1487
mandriva.com/security/advisories?name=MDVSA-2008:005
ubuntu.com/usn/usn-654-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9420
nvd.nist.gov/vuln/detail/CVE-2007-6351
github.com/advisories/GHSA-4j78-c8h2-ff3f
security-tracker.debian.org/tracker/CVE-2007-6351
access.redhat.com/errata/RHSA-2007:1165
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1165.json
cve.org/CVERecord?id=CVE-2007-6351
suse.com/security/cve/CVE-2007-6351