The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:1850 advisory.

    OpenJPEG is an open source library for reading and writing image files in     JPEG 2000 format.

    Multiple heap-based buffer overflow flaws were found in OpenJPEG.
    An attacker could create a specially crafted OpenJPEG image that, when     opened, could cause an application using openjpeg to crash or, possibly,     execute arbitrary code with the privileges of the user running the     application. (CVE-2013-6045, CVE-2013-6054)

    Multiple denial of service flaws were found in OpenJPEG. An attacker could     create a specially crafted OpenJPEG image that, when opened, could cause an     application using openjpeg to crash (CVE-2013-1447, CVE-2013-6052)

    Red Hat would like to thank Raphael Geissert for reporting these issues.

    Users of OpenJPEG are advised to upgrade to these updated packages, which     contain backported patches to correct these issues. All running     applications using OpenJPEG must be restarted for the update to take     effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : openjpeg (RHSA-2013:1850)

high Nessus Plugin ID 71516

Version 1.17