DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Red Hat Enterprise Linux (exiv2): Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-11-09
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux in exiv2 ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen und die Integrität zu gefährden.
01
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-37619US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4… | ||||
| CVE-2021-37618US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.4… | ||||
| CVE-2021-31292US | high7.5 | — | ||
An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service (DOS) via crafted metadata. | ||||
| CVE-2021-32617US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An inefficient algorithm (quadratic complexity) was found… | ||||
| CVE-2021-29623US | low3.3 | — | ||
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A read of uninitialized memory was found in Exiv2 versio… | ||||
| CVE-2021-29464US | high7.8 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-29463US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29473US | low2.5 | — | ||
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-29470US | medium6.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29458US | medium5.5 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3… | ||||
| CVE-2021-29457US | high7.8 | — | ||
Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.… | ||||
| CVE-2021-3482US | medium6.5 | — | ||
A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead t… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Red Hat Security Advisory vom 2021-11-09external
- Red Hat Security Advisory vom 2021-11-09external
- Amazon Linux Security Advisory ALAS-2023-2215 vom 2023-08-23external
- SUSE Security Update SUSE-SU-2022:3892-1 vom 2022-11-07external
- SUSE Security Update SUSE-SU-2022:4252-1 vom 2022-11-28external
- SUSE Security Update SUSE-SU-2022:4276-1 vom 2022-11-29external
- WID-SEC-W-2022-1968 - CSAF Versionself
- WID-SEC-2022-1968 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan