CVE-2021-31291

Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

Risk Information

Base Score
8.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.241

Associated Vulnerability

VulnerabilityOS Platform
EXIF/IPTC/XMP metadata manipulation tool (USN-5028-1) libexiv2-14_0.25-3.1ubuntu0.18.04.10_i386.debLinux
EXIF/IPTC/XMP metadata manipulation tool (USN-5028-1) libexiv2-14_0.25-3.1ubuntu0.18.04.10_amd64.debLinux
EXIF/IPTC/XMP metadata manipulation tool (USN-5028-1) libexiv2-27_0.27.2-8ubuntu2.5_amd64.debLinux
EXIF/IPTC/XMP metadata manipulation tool (USN-5028-1) libexiv2-27_0.27.3-3ubuntu1.4_amd64.debLinux
(RHSA-2021:3158) exiv2 security update exiv2-0.27.0-4.el7_8.x86_64.rpmLinux
(RHSA-2021:3158) exiv2 security update exiv2-devel-0.27.0-4.el7_8.i686.rpmLinux
(RHSA-2021:3158) exiv2 security update exiv2-devel-0.27.0-4.el7_8.x86_64.rpmLinux
(RHSA-2021:3158) exiv2 security update exiv2-doc-0.27.0-4.el7_8.noarch.rpmLinux
(RHSA-2021:3158) exiv2 security update exiv2-libs-0.27.0-4.el7_8.i686.rpmLinux
(RHSA-2021:3158) exiv2 security update exiv2-libs-0.27.0-4.el7_8.x86_64.rpmLinux
Exiv2 update (ELSA-2021-3158) exiv2-0.27.0-4.el7_8.x86_64.rpmLinux
Exiv2-devel update (ELSA-2021-3158) exiv2-devel-0.27.0-4.el7_8.i686.rpmLinux
Exiv2-devel update (ELSA-2021-3158) exiv2-devel-0.27.0-4.el7_8.x86_64.rpmLinux
Exiv2-doc update (ELSA-2021-3158) exiv2-doc-0.27.0-4.el7_8.noarch.rpmLinux
Exiv2-libs update (ELSA-2021-3158) exiv2-libs-0.27.0-4.el7_8.i686.rpmLinux
Exiv2-libs update (ELSA-2021-3158) exiv2-libs-0.27.0-4.el7_8.x86_64.rpmLinux
(RHSA-2021:3152) exiv2 security update exiv2-0.27.3-3.el8_4.x86_64.rpmLinux
(RHSA-2021:3152) exiv2 security update exiv2-debugsource-0.27.3-3.el8_4.i686.rpmLinux
(RHSA-2021:3152) exiv2 security update exiv2-debugsource-0.27.3-3.el8_4.x86_64.rpmLinux
(RHSA-2021:3152) exiv2 security update exiv2-libs-0.27.3-3.el8_4.i686.rpmLinux
(RHSA-2021:3152) exiv2 security update exiv2-libs-0.27.3-3.el8_4.x86_64.rpmLinux
(RHSA-2021:3153) compat-exiv2-026 security update compat-exiv2-026-0.26-4.el8_4.i686.rpmLinux
(RHSA-2021:3153) compat-exiv2-026 security update compat-exiv2-026-0.26-4.el8_4.x86_64.rpmLinux
(RHSA-2021:3153) compat-exiv2-026 security update compat-exiv2-026-debugsource-0.26-4.el8_4.i686.rpmLinux
(RHSA-2021:3153) compat-exiv2-026 security update compat-exiv2-026-debugsource-0.26-4.el8_4.x86_64.rpmLinux
(RHSA-2021:3233) compat-exiv2-026 security update compat-exiv2-026-0.26-3.el7_9.i686.rpmLinux
(RHSA-2021:3233) compat-exiv2-026 security update compat-exiv2-026-0.26-3.el7_9.x86_64.rpmLinux
(RHSA-2021:3234) compat-exiv2-023 security update compat-exiv2-023-0.23-2.el7_9.i686.rpmLinux
(RHSA-2021:3234) compat-exiv2-023 security update compat-exiv2-023-0.23-2.el7_9.x86_64.rpmLinux
Compat-exiv2-023 update (ELSA-2021-3234) compat-exiv2-023-0.23-2.el7_9.i686.rpmLinux
Compat-exiv2-023 update (ELSA-2021-3234) compat-exiv2-023-0.23-2.el7_9.x86_64.rpmLinux
SUSE-SU-2022:3543-1(SUSE Linux Enterprise Server 12-SP5 ) exiv2-debuginfo-0.23-12.11.1.x86_64.rpmLinux
SUSE-SU-2022:3543-1(SUSE Linux Enterprise Server 12-SP5 ) exiv2-debugsource-0.23-12.11.1.x86_64.rpmLinux
SUSE-SU-2022:3543-1(SUSE Linux Enterprise Server 12-SP5 ) libexiv2-12-0.23-12.11.1.x86_64.rpmLinux
SUSE-SU-2022:3543-1(SUSE Linux Enterprise Server 12-SP5 ) libexiv2-12-debuginfo-0.23-12.11.1.x86_64.rpmLinux
SUSE-SU-2022:4252-1(SUSE Linux Enterprise Server 12-SP5 ) exiv2-debuginfo-0.23-12.18.1.x86_64.rpmLinux
SUSE-SU-2022:4252-1(SUSE Linux Enterprise Server 12-SP5 ) exiv2-debugsource-0.23-12.18.1.x86_64.rpmLinux
SUSE-SU-2022:4252-1(SUSE Linux Enterprise Server 12-SP5 ) libexiv2-12-0.23-12.18.1.x86_64.rpmLinux
SUSE-SU-2022:4252-1(SUSE Linux Enterprise Server 12-SP5 ) libexiv2-12-debuginfo-0.23-12.18.1.x86_64.rpmLinux
(RHSA-2021:3158)Important: security update exiv2-debuginfo-0.27.0-4.el7_8.i686.rpmLinux
(RHSA-2021:3158)Important: security update exiv2-debuginfo-0.27.0-4.el7_8.x86_64.rpmLinux
(RHSA-2021:3233)Important: security update compat-exiv2-026-debuginfo-0.26-3.el7_9.i686.rpmLinux
(RHSA-2021:3233)Important: security update compat-exiv2-026-debuginfo-0.26-3.el7_9.x86_64.rpmLinux
(RHSA-2021:3234)Important: security update compat-exiv2-023-debuginfo-0.23-2.el7_9.i686.rpmLinux
(RHSA-2021:3234)Important: security update compat-exiv2-023-debuginfo-0.23-2.el7_9.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234