openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707) - Nessus

High   Plugin ID: 149550

This page contains detailed information about the openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707) Nessus plugin including available exploits and PoCs found on GitHub, in Metasploit or Exploit-DB for verifying of this vulnerability.

Table Of Contents
hide

Plugin Overview

ID: 149550
Name: openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)
Filename: openSUSE-2021-707.nasl
Vulnerability Published: 2021-04-23
This Plugin Published: 2021-05-18
Last Modification Time: 2022-01-26
Plugin Version: 1.4
Plugin Type: local
Plugin Family: SuSE Local Security Checks
Dependencies: ssh_get_info.nasl
Required KB Items [?]: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list

Vulnerability Information

Severity: High
Vulnerability Published: 2021-04-23
Patch Published: 2021-05-10
CVE [?]: CVE-2021-22204
CPE [?]: cpe:/o:novell:opensuse:15.2, p-cpe:/a:novell:opensuse:exiftool, p-cpe:/a:novell:opensuse:perl-File-RandomAccess, p-cpe:/a:novell:opensuse:perl-Image-ExifTool
Exploited by Malware: True

Synopsis

The remote openSUSE host is missing a security update.

Description

This update for perl-Image-ExifTool fixes the following issues :

Update to version 12.25 fixes (boo#1185547 CVE-2021-22204)

- JPEG XL support is now official

- Added read support for Medical Research Council (MRC) image files

- Added ability to write a number of 3gp tags in video files

- Added a new Sony PictureProfile value (thanks Jos Roost)

- Added a new Sony LensType (thanks LibRaw)

- Added a new Nikon LensID (thanks Niels Kristian Bech Jensen)

- Added a new Canon LensType

- Decode more GPS information from Blackvue dashcam videos

- Decode a couple of new NikonSettings tags (thanks Warren Hatch)

- Decode a few new RIFF tags

- Improved Validate option to add minor warning if standard XMP is missing xpacket wrapper

- Avoid decoding some large arrays in DNG images to improve performance unless the -m option is used

- Patched bug that could give runtime warning when trying to write an empty XMP structure

- Fixed decoding of ImageWidth/Height for JPEG XL images

- Fixed problem were Microsoft Xtra tags couldn't be deleted

version 12.24 :

- Added a new PhaseOne RawFormat value (thanks LibRaw)

- Decode a new Sony tag (thanks Jos Roost)

- Decode a few new Panasonic and FujiFilm tags (thanks LibRaw and Greybeard)

- Patched security vulnerability in DjVu reader

- Updated acdsee.config in distribution (thanks StarGeek)

- Recognize AutoCAD DXF files

- More work on experimental JUMBF read support

- More work on experimental JPEG XL read/write support

version 12.23 :

- Added support for Olympus ORI files

- Added experimental read/write support for JPEG XL images

- Added experimental read support for JUMBF metadata in JPEG and Jpeg2000 images

- Added built-in support for parsing GPS track from Denver ACG-8050 videos with the -ee option

- Added a some new Sony lenses (thanks Jos Roost and LibRaw)

- Changed priority of Samsung trailer tags so the first DepthMapImage takes precedence when -a is not used

- Improved identification of M4A audio files

- Patched to avoid escaping ',' in 'Binary data' message when

-struct is used

- Removed Unknown flag from MXF VideoCodingSchemeID tag

- Fixed -forcewrite=EXIF to apply to EXIF in binary header of EPS files

- API Changes :

+ Added BlockExtract option

version 12.22 :

- Added a few new Sony LensTypes and a new SonyModelID (thanks Jos Roost and LibRaw)

- Added Extra BaseName tag

- Added a new CanonModelID (thanks LibRaw)

- Decode timed GPS from unlisted programs in M2TS videos with the -ee3 option

- Decode more Sony rtmd tags

- Decode some tags for the Sony ILME-FX3 (thanks Jos Roost)

- Allow negative values to be written to XMP-aux:LensID

- Recognize HEVC video program in M2TS files

- Enhanced -b option so --b suppresses tags with binary data

- Improved flexibility when writing GPS coordinates :

+ Now pulls latitude and longitude from a combined GPSCoordinates string

+ Recognizes the full word 'South' and 'West' to write negative coordinates

- Improved warning when trying to write an integer QuickTime date/time tag and Time::Local is not available

- Convert GPSSpeed from mph to km/h in timed GPS from Garmin MP4 videos

version 12.21 :

- Added a few new iOS QuickTime tags

- Decode a couple more Sony rtmd tags

- Patch to avoid possible 'Use of uninitialized value' warning when attempting to write QuickTime date/time tags with an invalid value

- Fixed problem writing Microsoft Xtra tags

- Fixed Windows daylight savings time patch for file times that was broken in 12.19 (however directory times will not yet handle DST properly)

version 12.20 :

- Added ability to write some Microsoft Xtra tags in MOV/MP4 videos

- Added two new Canon LensType values (thanks Norbert Wasser)

- Added a new Nikon LensID

- Fixed problem reading FITS comments that start before column 11

version 12.19 :

- Added -list_dir option

- Added the 'ls-l' Shortcut tag

- Extract Comment and History from FITS files

- Enhanced FilePermissions to include device type (similar to 'ls -l')

- Changed the name of Apple ContentIdentifier tag to MediaGroupUUID (thanks Neal Krawetz)

- Fixed a potential 'substr outside of string' runtime error when reading corrupted EXIF

- Fixed edge case where NikonScanIFD may not be copied properly when copying MakerNotes to another file

- API Changes :

+ Added ability to read/write System tags of directories

+ Enhanced GetAllGroups() to support family 7 and take optional ExifTool reference

+ Changed QuickTimeHandler option default to 1

version 12.18 :

- Added a new SonyModelID

- Decode a number of Sony tags for the ILCE-1 (thanks Jos Roost)

- Decode a couple of new Canon tags (thanks LibRaw)

- Patched to read differently formatted UserData:Keywords as written by iPhone

- Patched to tolerate out-of-order Nikon MakerNote IFD entries when obtaining tags necessary for decryption

- Fixed a few possible Condition warnings for some NikonSettings tags

version 12.17 :

- Added a new Canon FocusMode value

- Added a new FujiFilm FilmMode value

- Added a number of new XMP-crs tags (thanks Herb)

- Decode a new H264 MDPM tag

- Allow non-conforming lower-case XMP boolean 'true' and 'false' values to be written, but only when print conversion is disabled

- Improved Validate option to warn about non-capitalized boolean XMP values

- Improved logic for setting GPSLatitude/LongitudeRef values when writing

- Changed -json and -php options so the -a option is implied even without the -g option

- Avoid extracting audio/video data from AVI videos when -ee

-u is used

- Patched decoding of Canon ContinuousShootingSpeed for newer firmware versions of the EOS-1DXmkIII

- Re-worked LensID patch of version 12.00 (github issue #51)

- Fixed a few typos in newly-added NikonSettings tags (thanks Herb)

- Fixed problem where group could not be specified for PNG-pHYs tags when writing version 12.16 :

- Extract another form of video subtitle text

- Enhanced -ee option with -ee2 and -ee3 to allow parsing of the H264 video stream in MP4 files

- Changed a Nikon FlashMode value

- Fixed problem that caused a failed DPX test on Strawberry Perl

- API Changes :

+ Enhanced ExtractEmbedded option

version 12.15 :

- Added a couple of new Sony LensType values (thanks LibRaw and Jos Roost)

- Added a new Nikon FlashMode value (thanks Mike)

- Decode NikonSettings (thanks Warren Hatch)

- Decode thermal information from DJI RJPEG images

- Fixed extra newline in -echo3 and -echo4 outputs added in version 12.10

- Fixed out-of-memory problem when writing some very large PNG files under Windows

version 12.14 :

- Added support for 2 more types of timed GPS in video files (that makes 49 different formats now supported)

- Added validity check for PDF trailer dictionary Size

- Added a new Pentax LensType

- Extract metadata from Jpeg2000 Association box

- Changed -g:XX:YY and -G:XX:YY options to show empty strings for non-existent groups

- Patched to issue warning and avoid writing date/time values with a zero month or day number

- Patched to avoid runtime warnings if trying to set FileName to an empty string

- Fixed issue that could cause GPS test number 12 to fail on some systems

- Fixed problem extracting XML as a block from Jpeg2000 images, and extract XML tags in the XML group instead of XMP

- Update URL

update to 12.13 :

- Add time zone automatically to most string-based QuickTime date/time tags when writing unless the PrintConv option is disabled

- Added -i HIDDEN option to ignore files with names that start with '.'

- Added a few new Nikon ShutterMode values (thanks Jan Skoda)

- Added ability to write Google GCamera MicroVideo XMP tags

- Decode a new Sony tag (thanks LibRaw)

- Changed behaviour when writing only pseudo tags to return an error and avoid writing any other tags if writing FileName fails

- Print 'X image files read' message even if only 1 file is read when at least one other file has failed the -if condition

- Added ability to geotag from DJI CSV log files

- Added a new CanonModelID

- Added a couple of new Sony LensType values (thanks LibRaw)

- Enhanced -csvDelim option to allow '\t', ' ', '\r' and '\'

- Unescape '\b' and '\f' in imported JSON values

- Fixed bug introduced in 12.10 which generated a 'Not an integer' warning when attempting to shift some QuickTime date/time tags

- Fixed shared-write permission problem with -@ argfile when using -stay_open and a filename containing special characters on Windows

- Added -csvDelim option

- Added new Canon and Olympus LensType values (thanks LibRaw)

- Added a warning if ICC_Profile is deleted from an image (github issue #63)

- EndDir() function for -if option now works when -fileOrder is used

- Changed FileSize conversion to use binary prefixes since that is how the conversion is currently done (eg. MiB instead of MB)

- Patched -csv option so columns aren't resorted when using -G option and one of the tags is missing from a file

- Fixed incompatiblity with Google Photos when writing UserData:GPSCoordinates to MP4 videos

- Fixed problem where the tags available in a -p format string were limited to the same as the -if[NUM] option when NUM was specified

- Fixed incorrect decoding of SourceFileIndex/SourceDirectoryIndex for Ricoh models

Update to 12.10

- Added -validate test for proper TIFF magic number in JPEG EXIF header

- Added support for Nikon Z7 LensData version 0801

- Added a new XMP-GPano tag

- Decode ColorData for the Canon EOS 1DXmkIII

- Decode more tags for the Sony ILCE-7SM3

- Automatically apply QuickTimeUTC option for CR3 files

- Improved decoding of XAttrMDLabel from MacOS files

- Ignore time zones when writing date/time values and using the -d option

- Enhanced -echo3 and -echo4 options to allow exit status to be returned

- Changed -execute so the -q option no longer suppresses the '(ready)' message when a synchronization number is used

- Added ability to copy CanonMakerNotes from CR3 images to other file types

- Added read support for ON1 presets file (.ONP)

- Added two new CanonModelID values

- Added trailing '/' when writing QuickTime:GPSCoordinates

- Added a number of new XMP-crs tags

- Added a new Sony LensType (thanks Jos Roost)

- Added a new Nikon Z lens (thanks LibRaw)

- Added a new Canon LensType

- Decode ColorData for Canon EOS R5/R6

- Decode a couple of new HEIF tags

- Decode FirmwareVersion for Canon M50

- Improved decoding of Sony CreativeStyle tags

- Improved parsing of Radiance files to recognize comments

- Renamed GIF AspectRatio tag to PixelAspectRatio

- Patched EndDir() feature so subdirectories are always processed when -r is used (previously, EndDir() would end processing of a directory completely)

- Avoid loading GoPro module unnecessarily when reading MP4 videos from some other cameras

- Fixed problem with an incorrect naming of CodecID tags in some MKV videos

- Fixed verbose output to avoid 'adding' messages for existing flattened XMP tags

- Added a new Sony LensType

- Recognize Mac OS X xattr files

- Extract ThumbnailImage from MP4 videos of more dashcam models

- Improved decoding of a number of Sony tags

- Fixed problem where the special -if EndDir() function didn't work properly for directories after the one in which it was initially called

- Patched to read DLL files which don't have a .rsrc section

- Patched to support new IGC date format when geotagging

- Patched to read DLL files with an invalid size in the header

- Added support for GoPro .360 videos

- Added some new Canon RF and Nikkor Z lenses

- Added some new Sony LensType and CreativeStyle values and decode some ILCE-7C tags

- Added a number of new Olympus SceneMode values

- Added a new Nikon LensID

- Decode more timed metadata from Insta360 videos

- Decode timed GPS from videos of more Garmin dashcam models

- Decode a new GoPro video tag

- Reformat time-only EventTime values when writing and prevent arbitrary strings from being written

- Patched to accept backslashes in SourceFile entries for -csv option

update to 12.06

- Added read support for Lyrics3 metadata (and fixed problem where APE metadata may be ignored if Lyrics3 exists)

- Added a new Panasonic VideoBurstMode value

- Added a new Olympus MultipleExposureMode value

- Added a new Nikon LensID

- Added back conversions for XMP-dwc EventTime that were removed in 12.04 with a patch to allow time-only values

- Decode GIF AspectRatio

- Decode Olympus FocusBracketStepSize

- Extract PNG iDOT chunk in Binary format with the name AppleDataOffsets

- Process PNG images which do not start with mandatory IHDR chunk

- Added a new Panasonic SelfTimer value

- Decode a few more DPX tags

- Extract AIFF APPL tag as ApplicationData

- Fixed bug writing QuickTime ItemList 'gnre' Genre values

- Fixed an incorrect value for Panasonic VideoBurstResolution

- Fixed problem when applying a time shift to some invalid makernote date/time values

update to 12.04 :

- See /usr/share/doc/packages/perl-Image-ExifTool/Change

update to 11.50, see Image-ExifTool-11.50.tar.gz for details

Update to version 11.30 :

- Add a new Sony/Minolta LensType.

- Decode streaming metadata from TomTom Bandit Action Cam MP4 videos.

- Decode Reconyx HF2 PRO maker notes.

- Decode ColorData for some new Canon models.

- Enhanced -geotag feature to set AmbientTemperature if available.

- Remove non-significant spaces from some DICOM values.

- Fix possible ''x' outside of string' error when reading corrupted EXIF.

- Fix incorrect write group for GeoTIFF tags.

Update to version 11.29

- See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.27

- See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.24

- See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.11 (changes since 11.01) :

- See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to 11.01 :

- Added a new ProfileCMMType

- Added a Validate warning about non-standard EXIF or XMP in PNG images

- Added a new Canon LensType

- Decode a couple more PanasonicRaw tags

- Patched to avoid adding tags to QuickTime videos with multiple 'mdat' atoms --> avoids potential corruption of these videos!

Update to 11.00 :

- Added read support for WTV and DVR-MS videos

- Added print conversions for some ASF date/time tags

- Added a new SonyModelID

- Decode a new PanasonicRaw tag

- Decode some new Sony RX100 VI tags

- Made Padding and OffsetSchema tags 'unsafe' so they aren't copied by default

Solution

Update the affected perl-Image-ExifTool packages.

Public Exploits

Target Network Port(s): N/A
Target Asset(s): N/A
Exploit Available: True (Metasploit Framework, Exploit-DB, GitHub)
Exploit Ease: Exploits are available

Here's the list of publicly known exploits and PoCs for verifying the openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707) vulnerability:

  1. Metasploit: exploit/unix/fileformat/exiftool_djvu_ant_perl_injection
    [ExifTool DjVu ANT Perl injection]
  2. Metasploit: exploit/multi/http/gitlab_exif_rce
    [GitLab Unauthenticated Remote ExifTool Command Injection]
  3. Exploit-DB: exploits/ruby/webapps/50532.txt
    [EDB-50532: GitLab 13.10.2 - Remote Code Execution (RCE) (Unauthenticated)]
  4. GitHub: https://github.com/0xBruno/CVE-2021-22204
    [CVE-2021-22204: A complete PoC for CVE-2021-22204 exiftool RCE]
  5. GitHub: https://github.com/0xsyr0/OSCP
    [CVE-2021-22204]
  6. GitHub: https://github.com/Al1ex/CVE-2021-22205
    [CVE-2021-22204]
  7. GitHub: https://github.com/AssassinUKG/CVE-2021-22204
    [CVE-2021-22204]
  8. GitHub: https://github.com/BBurgarella/CVE-2021-22204
    [CVE-2021-22204: My own python implementation of a CVE-2021-22204 exploit]
  9. GitHub: https://github.com/CsEnox/Gitlab-Exiftool-RCE
    [CVE-2021-22204]
  10. GitHub: https://github.com/EdgeSecurityTeam/Vulnerability
    [CVE-2021-22204]
  11. GitHub: https://github.com/GatoGamer1155/CVE-2021-22204
    [CVE-2021-22204: Script en python para crear imagenes maliciosas (reverse shell)]
  12. GitHub: https://github.com/Konstantinos-Papanagnou/CMSpit
    [CVE-2021-22204]
  13. GitHub: https://github.com/LazyTitan33/CVE-2021-22204
    [CVE-2021-22204]
  14. GitHub: https://github.com/PenTestical/CVE-2021-22204
    [CVE-2021-22204]
  15. GitHub: https://github.com/SexyBeast233/SecBooks
    [CVE-2021-22204]
  16. GitHub: https://github.com/binganao/vulns-2022
    [CVE-2021-22204]
  17. GitHub: https://github.com/convisoappsec/CVE-2021-22204-exiftool
    [CVE-2021-22204: Python exploit for the CVE-2021-22204 vulnerability in Exiftool]
  18. GitHub: https://github.com/devdanqtuan/CVE-2021-22205
    [CVE-2021-22204]
  19. GitHub: https://github.com/gkhan496/WDIR
    [CVE-2021-22204]
  20. GitHub: https://github.com/harsh-bothra/learn365
    [CVE-2021-22204]
  21. GitHub: https://github.com/hongson97/ctf-challenges
    [CVE-2021-22204]
  22. GitHub: https://github.com/htrgouvea/research
    [CVE-2021-22204]
  23. GitHub: https://github.com/johnjhacking/CVE-2021-22204-Payloads-and-Steps
    [CVE-2021-22204: Additional payloads and functions]
  24. GitHub: https://github.com/mr-r3bot/Gitlab-CVE-2021-22205
    [CVE-2021-22204]
  25. GitHub: https://github.com/oneoy/Gitlab-Exiftool-RCE
    [CVE-2021-22204]
  26. GitHub: https://github.com/pizza-power/Golang-CVE-2021-22205-POC
    [CVE-2021-22204]
  27. GitHub: https://github.com/runsel/GitLab-CVE-2021-22205-
    [CVE-2021-22204]
  28. GitHub: https://github.com/star-sg/CVE
    [CVE-2021-22204]
  29. GitHub: https://github.com/szTheory/exifcleaner
    [CVE-2021-22204]
  30. GitHub: https://github.com/trganda/CVE-2021-22204
    [CVE-2021-22204]
  31. GitHub: https://github.com/bilkoh/POC-CVE-2021-22204
    [CVE-2021-22204: POC for exiftool vuln (CVE-2021-22204).]
  32. GitHub: https://github.com/convisolabs/CVE-2021-22204-exiftool
    [CVE-2021-22204: Python exploit for the CVE-2021-22204 vulnerability in Exiftool]
  33. GitHub: https://github.com/ph-arm/CVE-2021-22204-Gitlab
    [CVE-2021-22204: Modification of gitlab exploit anything under 13.10]
  34. GitHub: https://github.com/se162xg/CVE-2021-22204
    [CVE-2021-22204: Exiftool arbitrary code execution vulnerability]
  35. GitHub: https://github.com/tuhin81/CVE-2021-22204-exiftool
    [CVE-2021-22204: Exiftool exploit]
  36. GitHub: https://github.com/UNICORDev/exploit-CVE-2021-22204
    [CVE-2021-22204: Exploit for CVE-2021-22204 (ExifTool)]
  37. GitHub: https://github.com/Asaad27/CVE-2021-22204-RSE
    [CVE-2021-22204: Reverse shell execution exploit of CVE 22204]

Before running any exploit against any system, make sure you are authorized by the owner of the target system(s) to perform such activity. In any other case, this would be considered as an illegal activity.

WARNING: Beware of using unverified exploits from sources such as GitHub or Exploit-DB. These exploits and PoCs could contain malware. For more information, see how to use exploits safely.

Risk Information

CVSS V2 Vector [?]: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C
CVSS Base Score:6.8 (Medium)
Impact Subscore:6.4
Exploitability Subscore:8.6
CVSS Temporal Score:5.9 (Medium)
CVSS Environmental Score:NA (None)
Modified Impact Subscore:NA
Overall CVSS Score:5.9 (Medium)
CVSS V3 Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
CVSS Base Score:7.8 (High)
Impact Subscore:5.9
Exploitability Subscore:1.8
CVSS Temporal Score:7.5 (High)
CVSS Environmental Score:NA (None)
Modified Impact Subscore:NA
Overall CVSS Score:7.5 (High)

Go back to menu.

Plugin Source

This is the openSUSE-2021-707.nasl nessus plugin source code. This script is Copyright (C) 2021-2022 and is owned by Tenable, Inc. or an Affiliate thereof. 

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from openSUSE Security Update openSUSE-2021-707.
#
# The text description of this plugin is (C) SUSE LLC.
#

include('deprecated_nasl_level.inc');
include('compat.inc');

if (description)
{
  script_id(149550);
  script_version("1.4");
  script_set_attribute(attribute:"plugin_modification_date", value:"2022/01/26");

  script_cve_id("CVE-2021-22204");
  script_xref(name:"CISA-KNOWN-EXPLOITED", value:"2021/12/01");

  script_name(english:"openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707)");

  script_set_attribute(attribute:"synopsis", value:
"The remote openSUSE host is missing a security update.");
  script_set_attribute(attribute:"description", value:
"This update for perl-Image-ExifTool fixes the following issues :

Update to version 12.25 fixes (boo#1185547 CVE-2021-22204)

  - JPEG XL support is now official

  - Added read support for Medical Research Council (MRC)     image files

  - Added ability to write a number of 3gp tags in video     files

  - Added a new Sony PictureProfile value (thanks Jos Roost)

  - Added a new Sony LensType (thanks LibRaw)

  - Added a new Nikon LensID (thanks Niels Kristian Bech     Jensen)

  - Added a new Canon LensType

  - Decode more GPS information from Blackvue dashcam videos

  - Decode a couple of new NikonSettings tags (thanks Warren     Hatch)

  - Decode a few new RIFF tags

  - Improved Validate option to add minor warning if     standard XMP is missing xpacket wrapper

  - Avoid decoding some large arrays in DNG images to     improve performance unless the -m option is used

  - Patched bug that could give runtime warning when trying     to write an empty XMP structure

  - Fixed decoding of ImageWidth/Height for JPEG XL images

  - Fixed problem were Microsoft Xtra tags couldn't be     deleted

version 12.24 :

  - Added a new PhaseOne RawFormat value (thanks LibRaw)

  - Decode a new Sony tag (thanks Jos Roost)

  - Decode a few new Panasonic and FujiFilm tags (thanks     LibRaw and Greybeard)

  - Patched security vulnerability in DjVu reader

  - Updated acdsee.config in distribution (thanks StarGeek)

  - Recognize AutoCAD DXF files

  - More work on experimental JUMBF read support

  - More work on experimental JPEG XL read/write support

version 12.23 :

  - Added support for Olympus ORI files

  - Added experimental read/write support for JPEG XL images

  - Added experimental read support for JUMBF metadata in     JPEG and Jpeg2000 images

  - Added built-in support for parsing GPS track from Denver     ACG-8050 videos with the -ee option

  - Added a some new Sony lenses (thanks Jos Roost and     LibRaw)

  - Changed priority of Samsung trailer tags so the first     DepthMapImage takes precedence when -a is not used

  - Improved identification of M4A audio files

  - Patched to avoid escaping ',' in 'Binary data' message     when

    -struct is used

  - Removed Unknown flag from MXF VideoCodingSchemeID tag

  - Fixed -forcewrite=EXIF to apply to EXIF in binary header     of EPS files

  - API Changes :

  + Added BlockExtract option

version 12.22 :

  - Added a few new Sony LensTypes and a new SonyModelID     (thanks Jos Roost and LibRaw)

  - Added Extra BaseName tag

  - Added a new CanonModelID (thanks LibRaw)

  - Decode timed GPS from unlisted programs in M2TS videos     with the -ee3 option

  - Decode more Sony rtmd tags

  - Decode some tags for the Sony ILME-FX3 (thanks Jos     Roost)

  - Allow negative values to be written to XMP-aux:LensID

  - Recognize HEVC video program in M2TS files

  - Enhanced -b option so --b suppresses tags with binary     data

  - Improved flexibility when writing GPS coordinates :

  + Now pulls latitude and longitude from a combined     GPSCoordinates string

  + Recognizes the full word 'South' and 'West' to write     negative coordinates

  - Improved warning when trying to write an integer     QuickTime date/time tag and Time::Local is not available

  - Convert GPSSpeed from mph to km/h in timed GPS from     Garmin MP4 videos

version 12.21 :

  - Added a few new iOS QuickTime tags

  - Decode a couple more Sony rtmd tags

  - Patch to avoid possible 'Use of uninitialized value'     warning when attempting to write QuickTime date/time     tags with an invalid value

  - Fixed problem writing Microsoft Xtra tags

  - Fixed Windows daylight savings time patch for file times     that was broken in 12.19 (however directory times will     not yet handle DST properly)

version 12.20 :

  - Added ability to write some Microsoft Xtra tags in     MOV/MP4 videos

  - Added two new Canon LensType values (thanks Norbert     Wasser)

  - Added a new Nikon LensID

  - Fixed problem reading FITS comments that start before     column 11

version 12.19 :

  - Added -list_dir option

  - Added the 'ls-l' Shortcut tag

  - Extract Comment and History from FITS files

  - Enhanced FilePermissions to include device type (similar     to 'ls -l')

  - Changed the name of Apple ContentIdentifier tag to     MediaGroupUUID (thanks Neal Krawetz)

  - Fixed a potential 'substr outside of string' runtime     error when reading corrupted EXIF

  - Fixed edge case where NikonScanIFD may not be copied     properly when copying MakerNotes to another file

  - API Changes :

  + Added ability to read/write System tags of directories

  + Enhanced GetAllGroups() to support family 7 and take     optional ExifTool reference

  + Changed QuickTimeHandler option default to 1

version 12.18 :

  - Added a new SonyModelID

  - Decode a number of Sony tags for the ILCE-1 (thanks Jos     Roost)

  - Decode a couple of new Canon tags (thanks LibRaw)

  - Patched to read differently formatted UserData:Keywords     as written by iPhone

  - Patched to tolerate out-of-order Nikon MakerNote IFD     entries when obtaining tags necessary for decryption

  - Fixed a few possible Condition warnings for some     NikonSettings tags

version 12.17 :

  - Added a new Canon FocusMode value

  - Added a new FujiFilm FilmMode value

  - Added a number of new XMP-crs tags (thanks Herb)

  - Decode a new H264 MDPM tag

  - Allow non-conforming lower-case XMP boolean 'true' and     'false' values to be written, but only when print     conversion is disabled

  - Improved Validate option to warn about non-capitalized     boolean XMP values

  - Improved logic for setting GPSLatitude/LongitudeRef     values when writing

  - Changed -json and -php options so the -a option is     implied even without the -g option

  - Avoid extracting audio/video data from AVI videos when
    -ee

    -u is used

  - Patched decoding of Canon ContinuousShootingSpeed for     newer firmware versions of the EOS-1DXmkIII

  - Re-worked LensID patch of version 12.00 (github issue     #51)

  - Fixed a few typos in newly-added NikonSettings tags     (thanks Herb)

  - Fixed problem where group could not be specified for     PNG-pHYs tags when writing version 12.16 :

  - Extract another form of video subtitle text

  - Enhanced -ee option with -ee2 and -ee3 to allow parsing     of the H264 video stream in MP4 files

  - Changed a Nikon FlashMode value

  - Fixed problem that caused a failed DPX test on     Strawberry Perl

  - API Changes :

  + Enhanced ExtractEmbedded option

version 12.15 :

  - Added a couple of new Sony LensType values (thanks     LibRaw and Jos Roost)

  - Added a new Nikon FlashMode value (thanks Mike)

  - Decode NikonSettings (thanks Warren Hatch)

  - Decode thermal information from DJI RJPEG images

  - Fixed extra newline in -echo3 and -echo4 outputs added     in version 12.10

  - Fixed out-of-memory problem when writing some very large     PNG files under Windows

version 12.14 :

  - Added support for 2 more types of timed GPS in video     files (that makes 49 different formats now supported)

  - Added validity check for PDF trailer dictionary Size

  - Added a new Pentax LensType

  - Extract metadata from Jpeg2000 Association box

  - Changed -g:XX:YY and -G:XX:YY options to show empty     strings for non-existent groups

  - Patched to issue warning and avoid writing date/time     values with a zero month or day number

  - Patched to avoid runtime warnings if trying to set     FileName to an empty string

  - Fixed issue that could cause GPS test number 12 to fail     on some systems

  - Fixed problem extracting XML as a block from Jpeg2000     images, and extract XML tags in the XML group instead of     XMP

  - Update URL

update to 12.13 :

  - Add time zone automatically to most string-based     QuickTime date/time tags when writing unless the     PrintConv option is disabled

  - Added -i HIDDEN option to ignore files with names that     start with '.'

  - Added a few new Nikon ShutterMode values (thanks Jan     Skoda)

  - Added ability to write Google GCamera MicroVideo XMP     tags

  - Decode a new Sony tag (thanks LibRaw)

  - Changed behaviour when writing only pseudo tags to     return an error and avoid writing any other tags if     writing FileName fails

  - Print 'X image files read' message even if only 1 file     is read when at least one other file has failed the -if     condition

  - Added ability to geotag from DJI CSV log files

  - Added a new CanonModelID

  - Added a couple of new Sony LensType values (thanks     LibRaw)

  - Enhanced -csvDelim option to allow '\t', '
', '\r' and     '\\'

  - Unescape '\b' and '\f' in imported JSON values

  - Fixed bug introduced in 12.10 which generated a 'Not an     integer' warning when attempting to shift some QuickTime     date/time tags

  - Fixed shared-write permission problem with -@ argfile     when using -stay_open and a filename containing special     characters on Windows

  - Added -csvDelim option

  - Added new Canon and Olympus LensType values (thanks     LibRaw)

  - Added a warning if ICC_Profile is deleted from an image     (github issue #63)

  - EndDir() function for -if option now works when
    -fileOrder is used

  - Changed FileSize conversion to use binary prefixes since     that is how the conversion is currently done (eg. MiB     instead of MB)

  - Patched -csv option so columns aren't resorted when     using -G option and one of the tags is missing from a     file

  - Fixed incompatiblity with Google Photos when writing     UserData:GPSCoordinates to MP4 videos

  - Fixed problem where the tags available in a -p format     string were limited to the same as the -if[NUM] option     when NUM was specified

  - Fixed incorrect decoding of     SourceFileIndex/SourceDirectoryIndex for Ricoh models

Update to 12.10

  - Added -validate test for proper TIFF magic number in     JPEG EXIF header

  - Added support for Nikon Z7 LensData version 0801

  - Added a new XMP-GPano tag

  - Decode ColorData for the Canon EOS 1DXmkIII

  - Decode more tags for the Sony ILCE-7SM3

  - Automatically apply QuickTimeUTC option for CR3 files

  - Improved decoding of XAttrMDLabel from MacOS files

  - Ignore time zones when writing date/time values and     using the -d option

  - Enhanced -echo3 and -echo4 options to allow exit status     to be returned

  - Changed -execute so the -q option no longer suppresses     the '(ready)' message when a synchronization number is     used

  - Added ability to copy CanonMakerNotes from CR3 images to     other file types

  - Added read support for ON1 presets file (.ONP)

  - Added two new CanonModelID values

  - Added trailing '/' when writing QuickTime:GPSCoordinates

  - Added a number of new XMP-crs tags

  - Added a new Sony LensType (thanks Jos Roost)

  - Added a new Nikon Z lens (thanks LibRaw)

  - Added a new Canon LensType

  - Decode ColorData for Canon EOS R5/R6

  - Decode a couple of new HEIF tags

  - Decode FirmwareVersion for Canon M50

  - Improved decoding of Sony CreativeStyle tags

  - Improved parsing of Radiance files to recognize comments

  - Renamed GIF AspectRatio tag to PixelAspectRatio

  - Patched EndDir() feature so subdirectories are always     processed when -r is used (previously, EndDir() would     end processing of a directory completely)

  - Avoid loading GoPro module unnecessarily when reading     MP4 videos from some other cameras

  - Fixed problem with an incorrect naming of CodecID tags     in some MKV videos

  - Fixed verbose output to avoid 'adding' messages for     existing flattened XMP tags

  - Added a new Sony LensType

  - Recognize Mac OS X xattr files

  - Extract ThumbnailImage from MP4 videos of more dashcam     models

  - Improved decoding of a number of Sony tags

  - Fixed problem where the special -if EndDir() function     didn't work properly for directories after the one in     which it was initially called

  - Patched to read DLL files which don't have a .rsrc     section

  - Patched to support new IGC date format when geotagging

  - Patched to read DLL files with an invalid size in the     header 

  - Added support for GoPro .360 videos

  - Added some new Canon RF and Nikkor Z lenses

  - Added some new Sony LensType and CreativeStyle values     and decode some ILCE-7C tags

  - Added a number of new Olympus SceneMode values

  - Added a new Nikon LensID

  - Decode more timed metadata from Insta360 videos

  - Decode timed GPS from videos of more Garmin dashcam     models

  - Decode a new GoPro video tag

  - Reformat time-only EventTime values when writing and     prevent arbitrary strings from being written

  - Patched to accept backslashes in SourceFile entries for
    -csv option

update to 12.06

  - Added read support for Lyrics3 metadata (and fixed     problem where APE metadata may be ignored if Lyrics3     exists)

  - Added a new Panasonic VideoBurstMode value

  - Added a new Olympus MultipleExposureMode value

  - Added a new Nikon LensID

  - Added back conversions for XMP-dwc EventTime that were     removed in 12.04 with a patch to allow time-only values

  - Decode GIF AspectRatio

  - Decode Olympus FocusBracketStepSize

  - Extract PNG iDOT chunk in Binary format with the name     AppleDataOffsets

  - Process PNG images which do not start with mandatory     IHDR chunk

  - Added a new Panasonic SelfTimer value

  - Decode a few more DPX tags

  - Extract AIFF APPL tag as ApplicationData

  - Fixed bug writing QuickTime ItemList 'gnre' Genre values

  - Fixed an incorrect value for Panasonic     VideoBurstResolution

  - Fixed problem when applying a time shift to some invalid     makernote date/time values

update to 12.04 :

  - See /usr/share/doc/packages/perl-Image-ExifTool/Change 

update to 11.50, see Image-ExifTool-11.50.tar.gz for details

Update to version 11.30 :

  - Add a new Sony/Minolta LensType.

  - Decode streaming metadata from TomTom Bandit Action Cam     MP4 videos.

  - Decode Reconyx HF2 PRO maker notes.

  - Decode ColorData for some new Canon models.

  - Enhanced -geotag feature to set AmbientTemperature if     available.

  - Remove non-significant spaces from some DICOM values.

  - Fix possible ''x' outside of string' error when reading     corrupted EXIF.

  - Fix incorrect write group for GeoTIFF tags.

Update to version 11.29

  - See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.27

  - See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.24

  - See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to version 11.11 (changes since 11.01) :

  - See /usr/share/doc/packages/perl-Image-ExifTool/Changes

Update to 11.01 :

  - Added a new ProfileCMMType

  - Added a Validate warning about non-standard EXIF or XMP     in PNG images

  - Added a new Canon LensType

  - Decode a couple more PanasonicRaw tags

  - Patched to avoid adding tags to QuickTime videos with     multiple 'mdat' atoms --> avoids potential corruption of     these videos!

Update to 11.00 :

  - Added read support for WTV and DVR-MS videos

  - Added print conversions for some ASF date/time tags

  - Added a new SonyModelID

  - Decode a new PanasonicRaw tag

  - Decode some new Sony RX100 VI tags

  - Made Padding and OffsetSchema tags 'unsafe' so they     aren't copied by default");
  script_set_attribute(attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1185547");
  script_set_attribute(attribute:"solution", value:
"Update the affected perl-Image-ExifTool packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:H/RL:O/RC:C");

  script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"true");
  script_set_attribute(attribute:"exploited_by_malware", value:"true");
  script_set_attribute(attribute:"metasploit_name", value:'ExifTool DjVu ANT Perl injection');
  script_set_attribute(attribute:"exploit_framework_metasploit", value:"true");

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/04/23");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/05/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2021/05/18");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:exiftool");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-File-RandomAccess");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:perl-Image-ExifTool");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:15.2");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"SuSE Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2021-2022 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/SuSE/release");
if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
if (release !~ "^(SUSE15\.2)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "15.2", release);
if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);



flag = 0;

if ( rpm_check(release:"SUSE15.2", reference:"exiftool-12.25-lp152.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"perl-File-RandomAccess-12.25-lp152.4.3.1") ) flag++;
if ( rpm_check(release:"SUSE15.2", reference:"perl-Image-ExifTool-12.25-lp152.4.3.1") ) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "exiftool / perl-File-RandomAccess / perl-Image-ExifTool");
}

The latest version of this script can be found in these locations depending on your platform:

  • Linux / Unix:
    /opt/nessus/lib/nessus/plugins/openSUSE-2021-707.nasl
  • Windows:
    C:\ProgramData\Tenable\Nessus\nessus\plugins\openSUSE-2021-707.nasl
  • Mac OS X:
    /Library/Nessus/run/lib/nessus/plugins/openSUSE-2021-707.nasl

Go back to menu.

How to Run

Here is how to run the openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707) as a standalone plugin via the Nessus web user interface (https://localhost:8834/):

  1. Click to start a New Scan.
  2. Select Advanced Scan.
  3. Navigate to the Plugins tab.
  4. On the top right corner click to Disable All plugins.
  5. On the left side table select SuSE Local Security Checks plugin family.
  6. On the right side table select openSUSE Security Update : perl-Image-ExifTool (openSUSE-2021-707) plugin ID 149550.
  7. Specify the target on the Settings tab and click to Save the scan.
  8. Run the scan.

Here are a few examples of how to run the plugin in the command line. Note that the examples below demonstrate the usage on the Linux / Unix platform.

Basic usage:

/opt/nessus/bin/nasl openSUSE-2021-707.nasl -t <IP/HOST>

Run the plugin with audit trail message on the console:

/opt/nessus/bin/nasl -a openSUSE-2021-707.nasl -t <IP/HOST>

Run the plugin with trace script execution written to the console (useful for debugging):

/opt/nessus/bin/nasl -T - openSUSE-2021-707.nasl -t <IP/HOST>

Run the plugin with using a state file for the target and updating it (useful for running multiple plugins on the target):

/opt/nessus/bin/nasl -K /tmp/state openSUSE-2021-707.nasl -t <IP/HOST>

Go back to menu.

References

See also: Similar and related Nessus plugins:
  • 149515 - Debian DLA-2663-1 : libimage-exiftool-perl security update
  • 149218 - Debian DSA-4910-1 : libimage-exiftool-perl - security update
  • 150692 - Ubuntu 18.04 LTS / 20.04 LTS / 20.10 / 21.04 : ExifTool vulnerability (USN-4987-1)
  • 155448 - Security Updates for Microsoft Office (November 2021) (macOS)
  • 154982 - Security Updates for Microsoft Excel Products (November 2021)
  • 154999 - Security Updates for Exchange (November 2021)
  • 155962 - Security Updates for Exchange (November 2021) (Remote)
  • 155000 - Security Updates for Microsoft Office Products (November 2021)
  • 154037 - KB5006667: Windows 10 version 1909 Security Update (October 2021)
  • 154034 - KB5006669: Windows 10 Version 1607 and Windows Server 2016 Security Update (October 2021)
  • 154033 - KB5006670: Windows 10 Version 2004 / Windows 10 Version 20H2 / Windows 10 Version 21H1 October 2021 Security Update
  • 154026 - KB5006672: Windows 10 Version 1809 and Windows Server 2019 Security Update (October 2021)
  • 154042 - KB5006674: Windows 11 Security Update (October 2021)
  • 154041 - KB5006675: WWindows 10 version 1507 LTS Security Update (October 2021)
  • 154029 - KB5006699: Windows Server 2022 Security Update (October 2021)
  • 154043 - KB5006715: Windows Server 2008 Security Update (October 2021)
  • 154035 - KB5006728: Windows 7 and Windows Server 2008 R2 Security Update (October 2021)
  • 154040 - KB5006729: Windows Server 2012 R2 Security Update (October 2021)
  • 154036 - KB5006732: Windows Server 2012 Security Update (October 2021)

Version

This page has been produced using Nessus Professional 10.1.2 (#68) LINUX, Plugin set 202205072148.
Plugin file openSUSE-2021-707.nasl version 1.4. For more plugins, visit the Nessus Plugin Library.

Go back to menu.