The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2672 advisory.

    The libexif packages provide a library for extracting extra information from image files.

    Security Fix(es):

    * libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS     (CVE-2020-13112)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in libexif before 0.6.22.
    Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This     is different from CVE-2020-0093.(CVE-2020-13112)

  - An issue was discovered in libexif before 0.6.22. Use     of uninitialized memory in EXIF Makernote handling     could lead to crashes and potential use-after-free     conditions.(CVE-2020-13113)

  - An issue was discovered in libexif before 0.6.22. An     unrestricted size in handling Canon EXIF MakerNote data     could lead to consumption of large amounts of compute     time for decoding EXIF data.(CVE-2020-13114)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in libexif before 0.6.22. An     unrestricted size in handling Canon EXIF MakerNote data     could lead to consumption of large amounts of compute     time for decoding EXIF data.(CVE-2020-13114)

  - An issue was discovered in libexif before 0.6.22. Use     of uninitialized memory in EXIF Makernote handling     could lead to crashes and potential use-after-free     conditions.(CVE-2020-13113)

  - An issue was discovered in libexif before 0.6.22.
    Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This     is different from CVE-2020-0093.(CVE-2020-13112)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - exif_entry_get_value in exif-entry.c in libexif 0.6.21     has a divide-by-zero error.(CVE-2020-12767)

  - An issue was discovered in libexif before 0.6.22.
    Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This     is different from CVE-2020-0093.(CVE-2020-13112)

  - An issue was discovered in libexif before 0.6.22. Use     of uninitialized memory in EXIF Makernote handling     could lead to crashes and potential use-after-free     conditions.(CVE-2020-13113)

  - An issue was discovered in libexif before 0.6.22. An     unrestricted size in handling Canon EXIF MakerNote data     could lead to consumption of large amounts of compute     time for decoding EXIF data.(CVE-2020-13114)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in libexif before 0.6.22.
    Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and     crashes.(CVE-2020-13112)

  - An issue was discovered in libexif before 0.6.22. Use     of uninitialized memory in EXIF Makernote handling     could lead to crashes and potential use-after-free     conditions.(CVE-2020-13113)

  - An issue was discovered in libexif before 0.6.22. An     unrestricted size in handling Canon EXIF MakerNote data     could lead to consumption of large amounts of compute     time for decoding EXIF data.(CVE-2020-13114)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2474 advisory.

    The libexif packages provide a library for extracting extra information from image files.

    Security Fix(es):

    * libexif: several buffer over-reads in EXIF MakerNote handling can lead to information disclosure and DoS     (CVE-2020-13112)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libexif installed on the remote host is prior to 0.6.21-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1443 advisory.

    An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This is different fromCVE-2020-0093. (CVE-2020-13112)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of libexif installed on the remote host is prior to 0.6.21-6.7. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1393 advisory.

    An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This is different fromCVE-2020-0093. (CVE-2020-13112)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libexif packages installed that are affected by a vulnerability:

  - An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling     could lead to information disclosure and crashes. This is different from CVE-2020-0093. (CVE-2020-13112)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
137834	RHEL 8 : libexif (RHSA-2020:2672)	Nessus	Red Hat Local Security Checks	2020/6/25	2024/11/7	critical
139139	EulerOS 2.0 SP8 : libexif (EulerOS-SA-2020-1809)	Nessus	Huawei Local Security Checks	2020/7/30	2022/5/12	critical
140144	EulerOS 2.0 SP5 : libexif (EulerOS-SA-2020-1923)	Nessus	Huawei Local Security Checks	2020/9/2	2022/5/12	critical
140909	EulerOS 2.0 SP3 : libexif (EulerOS-SA-2020-2142)	Nessus	Huawei Local Security Checks	2020/9/28	2022/5/12	critical
142348	EulerOS 2.0 SP2 : libexif (EulerOS-SA-2020-2356)	Nessus	Huawei Local Security Checks	2020/11/3	2022/5/11	critical
137309	RHEL 8 : libexif (RHSA-2020:2474)	Nessus	Red Hat Local Security Checks	2020/6/10	2024/11/7	critical
138045	Amazon Linux 2 : libexif (ALAS-2020-1443)	Nessus	Amazon Linux Local Security Checks	2020/7/2	2024/12/11	critical
138635	Amazon Linux AMI : libexif (ALAS-2020-1393)	Nessus	Amazon Linux Local Security Checks	2020/7/20	2024/12/11	critical
154633	NewStart CGSL CORE 5.05 / MAIN 5.05 : libexif Vulnerability (NS-SA-2021-0138)	Nessus	NewStart CGSL Local Security Checks	2021/10/28	2021/10/28	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical