Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function, `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The version of exiv2 installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-44398 advisory.

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function,     `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The     out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An     attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim     into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to     upgrade. There are no known workarounds for this vulnerability. (CVE-2023-44398)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202312-06 (Exiv2: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Exiv2. Please review the CVE identifiers referenced below     for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and
    ICC image metadata. An out-of-bounds write was found in Exiv2 version v0.28.0. The vulnerable function,
    `BmffImage::brotliUncompress`, is new in v0.28.0, so earlier versions of Exiv2 are _not_ affected. The
    out-of-bounds write is triggered when Exiv2 is used to read the metadata of a crafted image file. An
    attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim
    into running Exiv2 on a crafted image file. This bug is fixed in version v0.28.1. Users are advised to
    upgrade. There are no known workarounds for this vulnerability. (CVE-2023-44398)

ID	Name	Product	Family	Severity
295728	Azure Linux 3.0 Security Update: exiv2 (CVE-2023-44398)	Nessus	Azure Linux Local Security Checks	high
187205	GLSA-202312-06 : Exiv2: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	high
408069	Alpine: multiple exiv2 packages: security update to 0.28.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408069	Alpine: multiple exiv2 packages: security update to 0.28.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2023-44398

high

Tenable Plugins

high

high

high

high