Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:3234 advisory.

  - Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a     duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this     candidate. All references and descriptions in this candidate have been removed to prevent accidental usage     (CVE-2021-31291)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3234-1 advisory.

  - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Scientific Linux 7 host has packages installed that are affected by a vulnerability as referenced in the SLSA-2021:3233-1 advisory.

  - exiv2: Heap-based buffer overflow vulnerability in jp2image.cpp (CVE-2021-31291)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
208570	CentOS 7 : compat-exiv2-023 (RHSA-2021:3234)	Nessus	CentOS Local Security Checks	high
152867	Scientific Linux Security Update : compat-exiv2-023 on SL7.x i686/x86_64 (2021:3234)	Nessus	Scientific Linux Local Security Checks	critical
152866	Scientific Linux Security Update : compat-exiv2-026 on SL7.x i686/x86_64 (2021:3233)	Nessus	Scientific Linux Local Security Checks	critical

Detections

Analytics

CVE-2021-31291

No Score

Tenable Plugins

high

critical

critical