CVE-2020-0181: 
NixOS vulnerability analysis and mitigation

CVE-2020-0181 is a vulnerability discovered in the libexif library, specifically in the exif_data_load_data_thumbnail function of exif-data.c. The vulnerability was disclosed in June 2020 and affects the library's handling of EXIF metadata in image files. This integer overflow vulnerability could lead to denial of service conditions in affected systems (Red Hat Portal, Debian Tracker).

The vulnerability exists in the exif_data_load_data_thumbnail function within exif-data.c component of libexif. It manifests as an integer overflow condition that could be triggered when processing EXIF metadata in image files. The issue affects multiple versions of libexif prior to version 0.6.22 (Red Hat Advisory).

When exploited, this vulnerability can lead to a denial of service condition. The attack requires no additional execution privileges and can be triggered remotely without user interaction (Debian Tracker).

The vulnerability can be exploited remotely and does not require user interaction for exploitation. No additional execution privileges are needed to trigger the vulnerability (Debian Tracker).

The vulnerability has been fixed in libexif version 0.6.22 and later releases. Various Linux distributions have released security updates to address this issue, including Red Hat Enterprise Linux 8 with libexif-0.6.22-4.el8 and Fedora with versions 0.6.22-2.fc32 and 0.6.22-3.fc33 (Fedora Update, Red Hat Advisory).