The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2354 advisory.

  - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in PutLE16().
    The highest threat from this vulnerability is to data confidentiality and integrity as well as system     availability. (CVE-2018-25011)

  - A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being     killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as     well as system availability. (CVE-2020-36329)

  - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function     WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this     vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-36328)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities were discovered in libwebp, the implementation of the WebP image format, which could result in denial of service, memory disclosure or potentially the execution of arbitrary code if malformed images are processed.

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:2328-1 advisory.

  - libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011)

  - libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)

  - libwebp: heap-based buffer overflow in WebPDecode*Into functions (CVE-2020-36328)

  - libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c (CVE-2020-36329)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple security issues have been discovered in libwebp

CVE-2018-25009

An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVE-2018-25010

An out-of-bounds read was found in function ApplyFilter. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVE-2018-25011

A heap-based buffer overflow was found in PutLE16(). The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2018-25012

An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVE-2018-25013

An out-of-bounds read was found in function ShiftBytes. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVE-2018-25014

An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2020-36328

A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2020-36329

A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CVE-2020-36330

An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.

CVE-2020-36331

An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

For Debian 9 stretch, these problems have been fixed in version 0.5.2-1+deb9u1.

We recommend that you upgrade your libwebp packages.

For the detailed security status of libwebp please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/libwebp

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Apple iOS running on the mobile device is prior to 14.7. It is, therefore, affected by multiple vulnerabilities.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory.

  - libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011)

  - libwebp: heap-based buffer overflow in WebPDecode*Into functions (CVE-2020-36328)

  - libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c (CVE-2020-36329)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
150494	Oracle Linux 8 : libwebp (ELSA-2021-2354)	Nessus	Oracle Linux Local Security Checks	6/10/2021	6/10/2021	critical
150705	Debian DSA-4930-1 : libwebp - security update	Nessus	Debian Local Security Checks	6/11/2021	12/21/2023	critical
150711	Scientific Linux Security Update : qt5-qtimageformats on SL7.x i686/x86_64 (2021:2328)	Nessus	Scientific Linux Local Security Checks	6/11/2021	6/11/2021	critical
150173	Debian DLA-2672-1 : libwebp security update	Nessus	Debian Local Security Checks	6/3/2021	6/9/2021	critical
152037	Apple iOS < 14.7 Multiple Vulnerabilities (HT212601)	Nessus	Mobile Devices	7/23/2021	6/25/2024	critical
150321	RHEL 7 : libwebp (RHSA-2021:2260)	Nessus	Red Hat Local Security Checks	6/7/2021	4/28/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical