Test ID:	1.3.6.1.4.1.25623.1.1.10.2022.0236
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2022-0236)
Summary:	The remote host is missing an update for the 'exempi' package(s) announced via the MGASA-2022-0236 advisory.
Description:	Summary: The remote host is missing an update for the 'exempi' package(s) announced via the MGASA-2022-0236 advisory. Vulnerability Insight: XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. (CVE-2021-36045) XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. (CVE-2021-36046) XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. (CVE-2021-36047) XMP Toolkit SDK version 2020.1 (and earlier) is affected by an Improper Input Validation vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. (CVE-2021-36048) XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. (CVE-2021-36050) XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in arbitrary code execution in the context of the current user. Exploitation requires user interaction in that a victim must open a specially-crafted .cpp file. (CVE-2021-36051) XMP Toolkit version 2020.1 (and earlier) is affected by a memory corruption vulnerability, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required to exploit this vulnerability. (CVE-2021-36052) XMP Toolkit SDK versions 2020.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. (CVE-2021-36053) XMP Toolkit SDK version 2020.1 (and earlier) is affected by a buffer overflow vulnerability potentially resulting in local application denial of service in the context of the current user. Exploitation requires user interaction in that a victim must open a crafted file. (CVE-2021-36054) XMP Toolkit SDK versions 2020.1 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: 'exempi' package(s) on Mageia 8. Solution: Please install the updated package(s). CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-36045 https://helpx.adobe.com/security/products/xmpcore/apsb21-65.html https://lists.debian.org/debian-lts-announce/2023/09/msg00032.html Common Vulnerability Exposure (CVE) ID: CVE-2021-36046 Common Vulnerability Exposure (CVE) ID: CVE-2021-36047 Common Vulnerability Exposure (CVE) ID: CVE-2021-36048 Common Vulnerability Exposure (CVE) ID: CVE-2021-36050 Common Vulnerability Exposure (CVE) ID: CVE-2021-36051 Common Vulnerability Exposure (CVE) ID: CVE-2021-36052 Common Vulnerability Exposure (CVE) ID: CVE-2021-36053 Common Vulnerability Exposure (CVE) ID: CVE-2021-36054 Common Vulnerability Exposure (CVE) ID: CVE-2021-36055 Common Vulnerability Exposure (CVE) ID: CVE-2021-36056 Common Vulnerability Exposure (CVE) ID: CVE-2021-36058 Common Vulnerability Exposure (CVE) ID: CVE-2021-36064 Common Vulnerability Exposure (CVE) ID: CVE-2021-39847 Common Vulnerability Exposure (CVE) ID: CVE-2021-40716 https://helpx.adobe.com/security/products/xmpcore/apsb21-85.html Common Vulnerability Exposure (CVE) ID: CVE-2021-40732 Common Vulnerability Exposure (CVE) ID: CVE-2021-42528 https://helpx.adobe.com/security/products/xmpcore/apsb21-108.html Common Vulnerability Exposure (CVE) ID: CVE-2021-42529 Common Vulnerability Exposure (CVE) ID: CVE-2021-42530 Common Vulnerability Exposure (CVE) ID: CVE-2021-42531 Common Vulnerability Exposure (CVE) ID: CVE-2021-42532
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.