According to the versions of the exiv2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26     allows remote attackers to cause a denial of service     (heap-based buffer over-read) via a crafted image file,     a different vulnerability than     CVE-2018-10999.(CVE-2018-16336)

  - The Exiv2::Jp2Image::readMetadata function in     jp2image.cpp in Exiv2 0.26 allows remote attackers to     cause a denial of service (excessive memory allocation)     via a crafted file.(CVE-2018-4868)

  - In Exiv2 before v0.27.2, there is an integer overflow     vulnerability in the WebPImage::getHeaderOffset     function in webpimage.cpp. It can lead to a buffer     overflow vulnerability and a crash.(CVE-2019-14982)

  - There is a reachable assertion in the     Internal::TiffReader::visitDirectory function in     tiffvisitor.cpp of Exiv2 0.26 that will lead to a     remote denial of service attack via crafted     input.(CVE-2017-11683)

  - An Invalid memory address dereference was discovered in     Exiv2::StringValueBase::read in value.cpp in Exiv2     0.26. The vulnerability causes a segmentation fault and     application crash, which leads to denial of     service.(CVE-2017-14859)

  - An Invalid memory address dereference was discovered in     Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The     vulnerability causes a segmentation fault and     application crash, which leads to denial of     service.(CVE-2017-14862)

  - An Invalid memory address dereference was discovered in     Exiv2::getULong in types.cpp in Exiv2 0.26. The     vulnerability causes a segmentation fault and     application crash, which leads to denial of     service.(CVE-2017-14864)

  - There is a heap-based buffer overflow in the     Exiv2::us2Data function of types.cpp in Exiv2 0.26. A     Crafted input will lead to a denial of service     attack.(CVE-2017-14865)

  - There is a heap-based buffer over-read in the     Exiv2::Internal::PngChunk::keyTXTChunk function of     pngchunk_int.cpp in Exiv2 0.26. A crafted PNG file will     lead to a remote denial of service     attack.(CVE-2017-17669)

  - Exiv2 0.26 has a Null Pointer Dereference in the     Exiv2::DataValue::toLong function in value.cpp, related     to crafted metadata in a TIFF file.(CVE-2017-18005)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 在 Exiv2 中，types.cpp 的 Exiv2::us2Data 函式有一個堆積型緩衝區溢位 0.26。特製的輸入會導致拒絕服務攻擊。 (CVE-2017-14865)

請注意，Nessus 依賴供應商報告的套件存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Exiv2 0.26中的 types.cpp 的 Exiv2::us2Data 函数中存在基于堆的缓冲区溢出。构建的输入将导致拒绝服务攻击。 (CVE-2017-14865)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted     input will lead to a denial of service attack. (CVE-2017-14865)

Note that Nessus relies on the presence of the package as reported by the vendor.

This update for exiv2 fixes the following issues :

Security issues fixed :

  - CVE-2017-11591: There is a Floating point exception in     the Exiv2::ValueType function in Exiv2 0.26 that will     lead to a remote denial of service attack via crafted     input. (boo#1050257)

  - CVE-2017-11683: There is a reachable assertion in the     Internal::TiffReader::visitDirectory function in     tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote     denial of service attack via crafted input.
    (boo#1051188)

  - CVE-2017-14865: There is a heap-based buffer overflow in     the Exiv2::us2Data function of types.cpp in Exiv2 0.26.
    A Crafted input will lead to a denial of service attack.
    (boo#1061003)

  - CVE-2017-14862: An Invalid memory address dereference     was discovered in Exiv2::DataValue::read in value.cpp in     Exiv2 0.26. The vulnerability causes a segmentation     fault and application crash, which leads to denial of     service. (boo#1060996)

  - CVE-2017-14859: An Invalid memory address dereference     was discovered in Exiv2::StringValueBase::read in     value.cpp in Exiv2 0.26. The vulnerability causes a     segmentation fault and application crash, which leads to     denial of service. (boo#1061000)

According to the versions of the exiv2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Exiv2::Internal::PngChunk::parseTXTChunk in Exiv2 v0.26     allows remote attackers to cause a denial of service     (heap-based buffer over-read) via a crafted image file,     a different vulnerability than     CVE-2018-10999.(CVE-2018-16336)

  - In Exiv2 0.26 and previous versions,     PngChunk::readRawProfile in pngchunk_int.cpp may cause     a denial of service (application crash due to a     heap-based buffer over-read) via a crafted PNG     file.(CVE-2018-19535)

  - A PngChunk::parseChunkContent uncontrolled memory     allocation in Exiv2 through 0.27.1 allows an attacker     to cause a denial of service (crash due to an     std::bad_alloc exception) via a crafted PNG image     file.(CVE-2019-13112)

  - Exiv2 0.26 has a Null Pointer Dereference in the     Exiv2::DataValue::toLong function in value.cpp, related     to crafted metadata in a TIFF file.(CVE-2017-18005)

  - There is a heap-based buffer overflow in the     Exiv2::us2Data function of types.cpp in Exiv2 0.26. A     Crafted input will lead to a denial of service     attack.(CVE-2017-14865)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - Exiv2 の types.cpp の Exiv2::us2Data 関数にヒープベースのバッファオーバーフローがあります 0.26。細工された入力は、DoS 攻撃（サービス拒否攻撃）を引き起こす可能性があります。 （CVE-2017-14865）

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

このexiv2の更新では、次の問題が修正されています：

キャッシュサイドチャネル攻撃の軽減：

  - CVE-2017-11591: Exiv2: : ValueType関数（Exiv2 0.26）に浮動小数点の例外があります。これにより、細工された入力を使用したリモートのサービス拒否攻撃が引き起こされる可能性があります。（boo#1050257）

  - CVE-2017-11683: Internal: : TiffReader: : visitDirectory関数（Exiv2 0.26のiffvisitor.cpp内）に、到達可能なアサーションがあります。これにより、細工された入力を使用したリモートのサービス拒否が引き起こされる可能性があります。
    （boo#1051188）

  - CVE-2017-14865: Exiv: : us2Data関数（Exiv2 0.26のtypes.cppの関数）に、ヒープベースのバッファオーバーフローがあります。
    細工された入力がサービス拒否攻撃を引き起こす可能性があります。
    （boo#1061003）

  - CVE-2017-14862: Exiv2: : DataValue: : read（ Exiv2 0.26のvalue.cppの関数）で、無効なメモリアドレスデリファレンスが発見されました。この脆弱性によりセグメンテーション違反とアプリケーションクラッシュが発生し、これによってサービス拒否が引き起こされる可能性があります（boo#1060996）。

  - CVE-2017-14859: Exiv2: : StringValueBase: : read（ Exiv2 0.26のvalue.cppの関数）で、無効なメモリアドレスデリファレンスが発見されました。この脆弱性によりセグメンテーション違反とアプリケーションクラッシュが発生し、これによってサービス拒否が引き起こされる可能性があります（boo#1061000）。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
132377	EulerOS 2.0 SP5 : exiv2 (EulerOS-SA-2019-2710)	Nessus	Huawei Local Security Checks	2019/12/23	2024/4/2	medium
220605	Linux Distros 未修補弱點：CVE-2017-14865	Nessus	Misc.	2025/3/4	2025/9/5	medium
220605	Linux Distros 未修补的漏洞: CVE-2017-14865	Nessus	Misc.	2025/3/4	2025/9/5	medium
220605	Linux Distros Unpatched Vulnerability : CVE-2017-14865	Nessus	Misc.	2025/3/4	2025/9/5	medium
104084	openSUSE Security Update : exiv2 (openSUSE-2017-1180)	Nessus	SuSE Local Security Checks	2017/10/23	2021/1/19	high
131343	EulerOS 2.0 SP8 : exiv2 (EulerOS-SA-2019-2277)	Nessus	Huawei Local Security Checks	2019/11/27	2024/4/9	medium
220605	Linux Distros のパッチ未適用の脆弱性: CVE-2017-14865	Nessus	Misc.	2025/3/4	2025/9/5	medium
104084	openSUSEセキュリティ更新プログラム：exiv2 (openSUSE-2017-1180)	Nessus	SuSE Local Security Checks	2017/10/23	2021/1/19	high

検出

プラグインの検索

medium

medium

medium

medium

high

medium

medium

high