Fix for **CVE-2018-12648**.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the exempi package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Exempi is vulnerable to an issue that may manifest as a     NULL pointer dereference or an out-of-bounds access due     to not checking if vector is of required size before     accessing its elements. An attacker could use this to     cause a denial of service.(CVE-2018-12648)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for exempi fixes the following issues :

CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for exempi fixes the following issues :

  - CVE-2018-12648: Fixed a NULL pointer dereference (crash)     issue when processing webp files (bsc#1098946).

This update was imported from the SUSE:SLE-15:Update update project.

The remote Ubuntu 18.04 LTS / 20.04 LTS / 21.10 / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5483-1 advisory.

  - The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL     pointer dereference. (CVE-2018-12648)

  - XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that     could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass     mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open     a malicious file. (CVE-2021-36045, CVE-2021-36053)

  - XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially     resulting in arbitrary code execution in the context of the current user. User interaction is required to     exploit this vulnerability. (CVE-2021-36046, CVE-2021-36052)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability     potentially resulting in arbitrary code execution in the context of the current user. Exploitation     requires user interaction in that a victim must open a crafted file. (CVE-2021-36047, CVE-2021-36048)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially     resulting in arbitrary code execution in the context of the current user. Exploitation requires user     interaction in that a victim must open a crafted file. (CVE-2021-36050, CVE-2021-36056)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially     resulting in arbitrary code execution in the context of the current user. Exploitation requires user     interaction in that a victim must open a specially-crafted .cpp file. (CVE-2021-36051)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially     resulting in local application denial of service in the context of the current user. Exploitation requires     user interaction in that a victim must open a crafted file. (CVE-2021-36054)

  - XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could     result in arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-36055)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Integer Overflow vulnerability potentially     resulting in application-level denial of service in the context of the current user. Exploitation requires     user interaction in that a victim must open a crafted file. (CVE-2021-36058)

  - XMP Toolkit version 2020.1 (and earlier) is affected by a Buffer Underflow vulnerability which could     result in arbitrary code execution in the context of the current user. Exploitation of this issue requires     user interaction in that a victim must open a malicious file. (CVE-2021-36064)

  - XMP Toolkit SDK version 2020.1 (and earlier) is affected by a stack-based buffer overflow vulnerability     potentially resulting in arbitrary code execution in the context of the current user. Exploitation     requires user interaction in that a victim must open a crafted file. (CVE-2021-39847)

  - XMP Toolkit SDK versions 2021.07 (and earlier) are affected by an out-of-bounds read vulnerability that     could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass     mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open     a malicious file. (CVE-2021-40716)

  - XMP Toolkit version 2020.1 (and earlier) is affected by a null pointer dereference vulnerability that     could result in leaking data from certain memory locations and causing a local denial of service in the     context of the current user. User interaction is required to exploit this vulnerability in that the victim     will need to open a specially crafted MXF file. (CVE-2021-40732)

  - XMP Toolkit 2021.07 (and earlier) is affected by a Null pointer dereference vulnerability when parsing a     specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve an     application denial-of-service in the context of the current user. Exploitation of this issue requires user     interaction in that a victim must open a malicious file. (CVE-2021-42528)

  - XMP Toolkit SDK version 2021.07 (and earlier) is affected by a stack-based buffer overflow vulnerability     potentially resulting in arbitrary code execution in the context of the current user. Exploitation     requires user interaction in that a victim must open a crafted file. (CVE-2021-42529, CVE-2021-42530,     CVE-2021-42531, CVE-2021-42532)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
120211	Fedora 28 : exempi (2018-05d08fddf8)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	high
126272	EulerOS 2.0 SP8 : exempi (EulerOS-SA-2019-1645)	Nessus	Huawei Local Security Checks	6/27/2019	1/6/2021	high
120835	Fedora 29 : exempi (2018-d8824aeec5)	Nessus	Fedora Local Security Checks	1/3/2019	1/6/2021	high
126158	SUSE SLED15 / SLES15 Security Update : exempi (SUSE-SU-2019:1603-1)	Nessus	SuSE Local Security Checks	6/24/2019	1/13/2021	high
126333	openSUSE Security Update : exempi (openSUSE-2019-1649)	Nessus	SuSE Local Security Checks	6/28/2019	1/19/2021	high
126335	openSUSE Security Update : exempi (openSUSE-2019-1657)	Nessus	SuSE Local Security Checks	6/28/2019	1/8/2020	high
162376	Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Exempi vulnerabilities (USN-5483-1)	Nessus	Ubuntu Local Security Checks	6/17/2022	10/16/2023	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high