The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5214 advisory.

    The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format     with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format,     and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and     browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

    Security Fix(es):

    * libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : libwebp (RHSA-2023:5214)

high Nessus Plugin ID 181606

Version 1.9