The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - exiv2: integer overflow in the LoaderExifJpeg class in preview.cpp (CVE-2018-12265)

  - Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote     attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    (CVE-2014-9449)

  - exiv2 0.26 contains a Stack out of bounds read in webp parser (CVE-2017-1000126)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - exiv2: Heap-based buffer overflow in basicio.cpp (CVE-2017-12955)

  - Buffer overflow in the RiffVideo::infoTagsHandler function in riffvideo.cpp in Exiv2 0.24 allows remote     attackers to cause a denial of service (crash) via a long IKEY INFO tag value in an AVI file.
    (CVE-2014-9449)

  - exiv2 0.26 contains a Stack out of bounds read in webp parser (CVE-2017-1000126)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名稱	產品	系列	已發布	已更新	嚴重性
199672	RHEL 6 : exiv2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high
199570	RHEL 7 : exiv2 (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	high

偵測

搜尋 Plugin

high

high