The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2022:1797 advisory.

  - A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause     a denial of service (DOS) via a crafted file. (CVE-2020-18898)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3598-1 advisory.

    - CVE-2021-37621: Fixed denial of service due to infinite loop in Image:printIFDStructure (bsc#1189333).
    - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332).
    - CVE-2021-37619: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1189331).
    - CVE-2021-37618: Fixed out-of-bounds read in Exiv2:Jp2Image:printStructure (bsc#1189330).
    - CVE-2021-32617: Fixed denial of service inside inefficient algorithm (quadratic complexity)     (bsc#1186192).
    - CVE-2021-31292: Fixed integer overflow in CrwMap:encode0x1810 (bsc#1188756).
    - CVE-2021-31291: Fixed heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of     service (bsc#1188733).
    - CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447).
    - CVE-2020-18899: Fixed uncontrolled memory allocation (bsc#1189636).
    - CVE-2020-18898: Fixed remote denial of service in printIFDStructure function (bsc#1189780).
    - CVE-2018-8977: Fixed remote denial of service in Exiv2::Internal::printCsLensFFFF function in     canonmn_int.cpp (bsc#1086798).
    - CVE-2018-8976: Fixed remote denial of service in image.cpp Exiv2::Internal::stringFormat via out-of-     bounds read (bsc#1086810).
    - CVE-2018-5772: Fixed segmentation fault caused by uncontrolled recursion inthe     Exiv2::Image::printIFDStructure (bsc#1076579).
    - CVE-2018-18915: Fixed an infinite loop in the Exiv2:Image:printIFDStructure function (bsc#1114690).
    - CVE-2018-10772: Fixed segmentation fault when the function Exiv2::tEXtToDataBuf() is finished     (bsc#1092096).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:1842 advisory.

  - A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause     a denial of service (DOS) via a crafted file. (CVE-2020-18898)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0195 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2020-18898:
    A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause     a denial of service (DOS) via a crafted file.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause     a denial of service (DOS) via a crafted file. (CVE-2020-18898)

  - A buffer overflow vulnerability in the Databuf function in types.cpp of Exiv2 v0.27.1 leads to a denial of     service (DOS). (CVE-2020-19716)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CESA-2022:1797 advisory.

  - exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS (CVE-2020-18898)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2022-1797 advisory.

    [0.26-7]
    - Fix stack exhaustion issue in the printIFDStructure function       Resolves: bz#2003669

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2022-3455:01 advisory.

    * exiv2: stack exhaustion issue in the printIFDStructure function may lead to DoS (CVE-2020-18898)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
161101	AlmaLinux 8 : compat-exiv2-026 (ALSA-2022:1797)	Nessus	Alma Linux Local Security Checks	2022/5/12	2023/10/27	medium
166183	SUSE SLED15 / SLES15 Security Update : exiv2 (SUSE-SU-2022:3598-1)	Nessus	SuSE Local Security Checks	2022/10/18	2025/9/24	high
184584	Rocky Linux 8 : exiv2 (RLSA-2022:1842)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/6	medium
236164	Alibaba Cloud Linux 3 : 0195: compat-exiv2-026 (ALINUX3-SA-2022:0195)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	medium
158484	EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2022-1266)	Nessus	Huawei Local Security Checks	2022/3/1	2023/11/7	medium
160904	CentOS 8 : compat-exiv2-026 (CESA-2022:1797)	Nessus	CentOS Local Security Checks	2022/5/10	2023/10/27	medium
161310	Oracle Linux 8 : compat-exiv2-026 (ELSA-2022-1797)	Nessus	Oracle Linux Local Security Checks	2022/5/18	2024/10/22	medium
294512	MiracleLinux 8 : compat-exiv2-026-0.26-7.el8 (AXSA:2022-3455:01)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium

检测

插件搜索

medium

high

medium

medium

medium

medium

medium

medium