遠端 AlmaLinux 8 主機已安裝受 ALSA-2021:1758 公告中提及的一個弱點影響的套件。

  - Exiv2 0.27.2 讓攻擊者得以在從 crwimage_int.cpp 的 Exiv2::Internal::CiffDirectory::readDirectory 呼叫 types.cpp 中的 Exiv2::getULong 時觸發損毀這是因為沒有驗證 與 的總大小之間的關係所致位移和大小。 (CVE-2019-17402)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

遠端 Rocky Linux 8 主機已安裝受到 RLSA-2021:1758 公告中所提及一個弱點影響的套件。

  - Exiv2 0.27.2 讓攻擊者得以在從 crwimage_int.cpp 的 Exiv2::Internal::CiffDirectory::readDirectory 呼叫 types.cpp 中的 Exiv2::getULong 時觸發損毀這是因為沒有驗證 與 的總大小之間的關係所致位移和大小。 (CVE-2019-17402)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

发现 Exiv2 未能正确处理某些文件。攻击者可能利用此问题造成拒绝服务。

请注意，Tenable Network Security 已直接从 Ubuntu 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下，尽可能进行自动清理和排版。

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2021: 1758 公告中提及的一个漏洞影响。

  - exiv2：CiffDirectory: : readDirectory 中存在越界读取，这是缺少大小检查所致 (CVE-2019-17402)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 Rocky Linux 8 主机上存在安装的程序包该程序包受到公告 RLSA-2021:1758 中提及的漏洞的影响。

  - Exiv2 0.27.2 允许攻击者从 crwimage_int.cpp 中的 Exiv2::Internal::CiffDirectory::readDirectory 调用时在 types.cpp 的 Exiv2::getULong 中触发崩溃因为没有对总大小到 的关系偏移和大小。 (CVE-2019-17402)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 CentOS Linux 7 主机上安装的多个程序包受到 RHSA-2020:4030 公告中提及的一个漏洞影响。

  - 从 crwimage_int.cpp 中的 Exiv2::Internal::CiffDirectory::readDirectory 调用时，Exiv2 0.27.2 允许攻击者在 types.cpp 的 Exiv2::getULong 中触发崩溃，原因是不对总大小与 之间的关系进行验证偏移和大小。 (CVE-2019-17402)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

远程 CentOS Linux 8 主机上安装的程序包受到 CESA-2021: 1758 公告中提及的一个漏洞影响。

  - exiv2：CiffDirectory: : readDirectory 中存在越界读取，这是缺少大小检查所致 (CVE-2019-17402)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

远程 AlmaLinux 8 主机存在安装的程序包该程序包受到 ALSA-2021:1758 公告中提及的漏洞的影响。

  - Exiv2 0.27.2 允许攻击者从 crwimage_int.cpp 中的 Exiv2::Internal::CiffDirectory::readDirectory 调用时在 types.cpp 的 Exiv2::getULong 中触发崩溃因为没有对总大小到 的关系偏移和大小。 (CVE-2019-17402)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

According to the version of the exiv2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability :

  - Exiv2 0.27.2 allows attackers to trigger a crash in     Exiv2::getULong in types.cpp when called from     Exiv2::Internal::CiffDirectory::readDirectory in     crwimage_int.cpp, because there is no validation of the     relationship of the total size to the offset and     size.(CVE-2019-17402)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1758 advisory.

    The exiv2 packages provide a command line utility which can display and manipulate image metadata such as     EXIF, LPTC, and JPEG comments.

    The following packages have been upgraded to a later upstream version: exiv2 (0.27.3). (BZ#1880984)

    Security Fix(es):

    * exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.4 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4159-1 advisory.

    It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue     to cause a denial of service.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Exiv2 is a command-line utility and C++ library for     reading, writing, deleting, and modifying the metadata     of image files. An out-of-bounds read was found in     Exiv2 versions v0.27.3 and earlier. The out-of-bounds     read is triggered when Exiv2 is used to write metadata     into a crafted image file. An attacker could     potentially exploit the vulnerability to cause a denial     of service by crashing Exiv2, if they can trick the     victim into running Exiv2 on a crafted image file. Note     that this bug is only triggered when writing the     metadata, which is a less frequently used Exiv2     operation than reading the metadata. For example, to     trigger the bug in the Exiv2 command-line application,     you need to add an extra command-line argument such as     insert.(CVE-2021-29458)

  - Exiv2 is a C++ library and a command-line utility to     read, write, delete and modify Exif, IPTC, XMP and ICC     image metadata. An out-of-bounds read was found in     Exiv2 versions v0.27.3 and earlier. Exiv2 is a     command-line utility and C++ library for reading,     writing, deleting, and modifying the metadata of image     files. The out-of-bounds read is triggered when Exiv2     is used to write metadata into a crafted image file. An     attacker could potentially exploit the vulnerability to     cause a denial of service by crashing Exiv2, if they     can trick the victim into running Exiv2 on a crafted     image file. Note that this bug is only triggered when     writing the metadata, which is a less frequently used     Exiv2 operation than reading the metadata. For example,     to trigger the bug in the Exiv2 command-line     application, you need to add an extra command-line     argument such as `insert`.(CVE-2021-29473)

  - Exiv2 is a command-line utility and C++ library for     reading, writing, deleting, and modifying the metadata     of image files. An inefficient algorithm (quadratic     complexity) was found in Exiv2 versions v0.27.3 and     earlier. The inefficient algorithm is triggered when     Exiv2 is used to write metadata into a crafted image     file. An attacker could potentially exploit the     vulnerability to cause a denial of service, if they can     trick the victim into running Exiv2 on a crafted image     file.(CVE-2021-32617)

  - Exiv2 0.27.2 allows attackers to trigger a crash in     Exiv2::getULong in types.cpp when called from     Exiv2::Internal::CiffDirectory::readDirectory in     crwimage_int.cpp, because there is no validation of the     relationship of the total size to the offset and     size.(CVE-2019-17402)

  - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26     allows remote attackers to cause a denial of service     (heap-based buffer over-read) via a crafted image file,     a different vulnerability than     CVE-2018-10999.(CVE-2018-16336)

  - Exiv2::isoSpeed in easyaccess.cpp in Exiv2 v0.27-RC2     allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via a     crafted file.(CVE-2018-19607)

  - Exiv2 0.26 has a heap-based buffer overflow in getData     in preview.cpp.(CVE-2018-11531)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4030 advisory.

  - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from     Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the     relationship of the total size to the offset and size. (CVE-2019-17402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:1758 advisory.

  - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from     Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the     relationship of the total size to the offset and size. (CVE-2019-17402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2021:1758 advisory.

  - exiv2: out-of-bounds read in CiffDirectory::readDirectory due to lack of size check (CVE-2019-17402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1758 advisory.

  - Exiv2 0.27.2 allows attackers to trigger a crash in Exiv2::getULong in types.cpp when called from     Exiv2::Internal::CiffDirectory::readDirectory in crwimage_int.cpp, because there is no validation of the     relationship of the total size to the offset and size. (CVE-2019-17402)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
157587	AlmaLinux 8exiv2 (ALSA-2021:1758)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	medium
184659	Rocky Linux 8exiv2 (RLSA-2021:1758)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
130148	Ubuntu 16.04 LTS / 18.04 LTS：Exiv2 漏洞 (USN-4159-1)	Nessus	Ubuntu Local Security Checks	2019/10/22	2024/8/27	medium
149702	RHEL 8：exiv2 (RHSA-2021: 1758)	Nessus	Red Hat Local Security Checks	2021/5/19	2025/3/15	medium
184659	Rocky Linux 8 exiv2 (RLSA-2021:1758)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
141626	CentOS 7：exiv2 (RHSA-2020:4030)	Nessus	CentOS Local Security Checks	2020/10/20	2024/10/9	medium
149777	CentOS 8：exiv2 (CESA-2021: 1758)	Nessus	CentOS Local Security Checks	2021/5/19	2021/6/2	medium
157587	AlmaLinux 8 : exiv2 (ALSA-2021:1758)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	medium
147619	EulerOS Virtualization 3.0.6.6 : exiv2 (EulerOS-SA-2021-1470)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/10	medium
149702	RHEL 8 : exiv2 (RHSA-2021:1758)	Nessus	Red Hat Local Security Checks	2021/5/19	2025/3/15	medium
130148	Ubuntu 16.04 LTS / 18.04 LTS : Exiv2 vulnerability (USN-4159-1)	Nessus	Ubuntu Local Security Checks	2019/10/22	2024/8/27	medium
153280	EulerOS 2.0 SP2 : exiv2 (EulerOS-SA-2021-2367)	Nessus	Huawei Local Security Checks	2021/9/14	2023/11/30	critical
141626	CentOS 7 : exiv2 (RHSA-2020:4030)	Nessus	CentOS Local Security Checks	2020/10/20	2024/10/9	medium
157587	AlmaLinux 8 : exiv2 (ALSA-2021:1758)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	medium
149777	CentOS 8 : exiv2 (CESA-2021:1758)	Nessus	CentOS Local Security Checks	2021/5/19	2021/6/2	medium
184659	Rocky Linux 8 : exiv2 (RLSA-2021:1758)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium