Detections
Analytics
Alpine: multiple exiv2 packages: security update to 0.27.3-r0 (deprecated)
high Tenable Cloud Security Plugin ID 400226
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the
rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow
via a crafted JPG image containing malicious EXIF data. (CVE-2021-3482)
- Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata
of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow
is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially
exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a
crafted image file. Note that this bug is only triggered when _writing_ the metadata, which is a less
frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2
command-line application, you need to add an extra command-line argument such as `insert`. The bug is
fixed in version v0.27.4. (CVE-2021-29457)
- Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata
of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds
read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could
potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick
the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing
the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to
trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such
as insert. The bug is fixed in version v0.27.4. (CVE-2021-29458)
See Also
https://git.alpinelinux.org/aports/commit/?id=070aeafd47ec08dde573e82013f8a29805da02f4
https://git.alpinelinux.org/aports/commit/?id=ce3f9059bead0ad1ac550f604fe08c142af1c0de
Plugin Details
Severity: High
ID: 400226
Version: Revision 1.24
Type: Local
Published: 8/16/2023
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.12
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2021-29457
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 7
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/3/2021
Vulnerability Publication Date: 4/8/2021