EulerOS 2.0 SP8 : libexif (EulerOS-SA-2019-1781)
High Nessus Plugin ID 127018
SynopsisThe remote EulerOS host is missing multiple security updates.
DescriptionAccording to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :
- Most digital cameras produce EXIF files, which are JPEG files with extra tags that contain information about the image. The EXIF library allows you to parse an EXIF file and read the data from those tags.
- Security fix(es):
- An error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0.6.21 can be exploited to exhaust available CPU resources.(CVE-2018-20030)
Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
SolutionUpdate the affected libexif packages.