The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2020:5393 advisory.

  - In exif_entry_get_value of exif-entry.c, there is a possible out of bounds write due to an integer     overflow. This could lead to remote code execution if a third party app used this library to process     remote image data with no additional execution privileges needed. User interaction is not needed for     exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0Android ID:
    A-159625731 (CVE-2020-0452)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libexif installed on the remote host is prior to 0.6.22-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1580 advisory.

    A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a     remote code execution if a third party app used this library to process remote image data. The highest     threat from this vulnerability is to data confidentiality and integrity as well as system availability.
    (CVE-2020-0452)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-1008:06 advisory.

    libexif: out of bounds write due to an integer overflow in exif-entry.c     (CVE-2020-0452)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:5396 advisory.

    The libexif packages provide a library for extracting extra information from image files.

    Security Fix(es):

    * libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5402 advisory.

    The libexif packages provide a library for extracting extra information from image files.

    Security Fix(es):

    * libexif: out of bounds write due to an integer overflow in exif-entry.c (CVE-2020-0452)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
157510	AlmaLinux 8 : libexif (ALSA-2020:5393)	Nessus	Alma Linux Local Security Checks	2022/2/9	2022/2/14	critical
144799	Amazon Linux 2 : libexif (ALAS-2021-1580)	Nessus	Amazon Linux Local Security Checks	2021/1/7	2024/12/11	critical
294214	MiracleLinux 4 : libexif-0.6.21-6.0.1.AXS4 (AXSA:2020-1008:06)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
144115	RHEL 8 : libexif (RHSA-2020:5396)	Nessus	Red Hat Local Security Checks	2020/12/14	2024/11/7	critical
144201	RHEL 7 : libexif (RHSA-2020:5402)	Nessus	Red Hat Local Security Checks	2020/12/14	2024/11/7	critical

检测

插件搜索

critical

critical

critical

critical

critical