The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2752:04 advisory.

    * exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)
      * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)
      * exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)
      * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)
      * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470)
      * exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)
      * exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS     (CVE-2021-31292)
      * exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)
      * exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)
      * exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)
      * exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)
      * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017625 advisory.

    Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and     ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a     command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image     files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file.
    An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if     they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered     when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For     example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line     argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for     information about Exiv2 security.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:4173 advisory.

    Exiv2 is a C++ library to access image metadata, supporting read and write access to the Exif, IPTC and     XMP metadata, Exif MakerNote support, extract and delete methods for Exif thumbnails, classes to access     Ifd, and support for various image formats.

    The following packages have been upgraded to a later upstream version: exiv2 (0.27.4). (BZ#1989860)

    Security Fix(es):

    * exiv2: Heap-based buffer overflow in Jp2Image::readMetadata() (CVE-2021-3482)

    * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29457)

    * exiv2: Out-of-bounds read in Exiv2::Internal::CrwMap::encode (CVE-2021-29458)

    * exiv2: Heap-based buffer overflow in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29464)

    * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-29470)

    * exiv2: Out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata (CVE-2021-29473)

    * exiv2: Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS     (CVE-2021-31292)

    * exiv2: Out-of-bounds read in Exiv2::WebPImage::doWriteMetadata (CVE-2021-29463)

    * exiv2: Use of uninitialized memory in isWebPType() may lead to information leak (CVE-2021-29623)

    * exiv2: DoS due to quadratic complexity in ProcessUTF8Portion (CVE-2021-32617)

    * exiv2: Out-of-bounds read in Exiv2::Jp2Image::printStructure (CVE-2021-37618)

    * exiv2: Out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header (CVE-2021-37619)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.5 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4252-1 advisory.

    - CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of     service. (bsc#1142681)
    - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read(). (bsc#1189332)
    - CVE-2021-34334: Fixed a DoS due to integer overflow in loop counter. (bsc#1189338)
    - CVE-2021-31291: Fixed a heap-based buffer overflow vulnerability in jp2image.cpp may lead to a denial of     service via crafted metadata (bsc#1188733).
    - CVE-2021-32815: Fixed a deny-of-service due to assertion failure in crwimage_int.cpp (bsc#1189337).
    - CVE-2018-20097: Fixed SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroupsu (bsc#1119562).
    - CVE-2021-29457: Fixed a heap buffer overflow when write metadata into a crafted image file     (bsc#1185002).
    - CVE-2021-29473: Fixed out-of-bounds read in Exiv2::Jp2Image:doWriteMetadata (bsc#1186231).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
294742	MiracleLinux 8 : exiv2-0.27.4-5.el8 (AXSA:2021-2752:04)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
313843	Unity Linux 20.1060e / 20.1070e Security Update: exiv2 (UTSA-2026-017625)	Nessus	Unity Linux Local Security Checks	2026/5/11	2026/5/11	low
155217	RHEL 8 : exiv2 (RHSA-2021:4173)	Nessus	Red Hat Local Security Checks	2021/11/11	2025/3/15	high
168254	SUSE SLES12 Security Update : exiv2 (SUSE-SU-2022:4252-1)	Nessus	SuSE Local Security Checks	2022/11/29	2026/6/25	high

检测

插件搜索

high

low

high

high