RHEL 8 : exiv2 (RHSA-2021:4173)
high Nessus Plugin ID 155217
Language:
Synopsis
The remote Red Hat host is missing one or more security updates.Description
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4173 advisory.- exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)
- exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)
- exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)
- exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)
- exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470, CVE-2021-37619)
- exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)
- exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)
- exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS (CVE-2021-31292)
- exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)
- exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)
- exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Update the affected packages.See Also
https://cwe.mitre.org/data/definitions/20.html
https://cwe.mitre.org/data/definitions/119.html
https://cwe.mitre.org/data/definitions/120.html
https://cwe.mitre.org/data/definitions/125.html
https://cwe.mitre.org/data/definitions/190.html
https://cwe.mitre.org/data/definitions/400.html
https://cwe.mitre.org/data/definitions/704.html
https://cwe.mitre.org/data/definitions/787.html
https://cwe.mitre.org/data/definitions/908.html
https://access.redhat.com/security/cve/CVE-2021-3482
https://access.redhat.com/security/cve/CVE-2021-29457
https://access.redhat.com/security/cve/CVE-2021-29458
https://access.redhat.com/security/cve/CVE-2021-29463
https://access.redhat.com/security/cve/CVE-2021-29464
https://access.redhat.com/security/cve/CVE-2021-29470
https://access.redhat.com/security/cve/CVE-2021-29473
https://access.redhat.com/security/cve/CVE-2021-29623
https://access.redhat.com/security/cve/CVE-2021-31292
https://access.redhat.com/security/cve/CVE-2021-32617
https://access.redhat.com/security/cve/CVE-2021-37618
https://access.redhat.com/security/cve/CVE-2021-37619
https://access.redhat.com/errata/RHSA-2021:4173
https://bugzilla.redhat.com/1946314
https://bugzilla.redhat.com/1952607
https://bugzilla.redhat.com/1952612
https://bugzilla.redhat.com/1953708
https://bugzilla.redhat.com/1954065
https://bugzilla.redhat.com/1961650
https://bugzilla.redhat.com/1961691
https://bugzilla.redhat.com/1978100
https://bugzilla.redhat.com/1978105
https://bugzilla.redhat.com/1990330
Plugin Details
Severity: High
ID: 155217
File Name: redhat-RHSA-2021-4173.nasl
Version: 1.2
Type: local
Agent: unix
Family: Red Hat Local Security Checks
Published: 11/11/2021
Updated: 11/11/2021
Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent
Risk Information
CVSS Score Source: CVE-2021-29464
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Temporal Vector: E:U/RL:OF/RC:C
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:redhat:enterprise_linux:8, p-cpe:/a:redhat:enterprise_linux:exiv2, p-cpe:/a:redhat:enterprise_linux:exiv2-devel, p-cpe:/a:redhat:enterprise_linux:exiv2-doc, p-cpe:/a:redhat:enterprise_linux:exiv2-libs
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Exploit Ease: No known exploits are available
Patch Publication Date: 11/9/2021
Vulnerability Publication Date: 4/8/2021
Reference Information
CVE: CVE-2021-3482, CVE-2021-29457, CVE-2021-29458, CVE-2021-29463, CVE-2021-29464, CVE-2021-29470, CVE-2021-29473, CVE-2021-29623, CVE-2021-31292, CVE-2021-32617, CVE-2021-37618, CVE-2021-37619