CVE-2021-31291: exiv2
CVSS: 8.1v3.1HighRejected
AliasesMGASA-2021-0396RHSA-2021:3152RHSA-2021:3153RHSA-2021:3158RHSA-2021:3230RHSA-2021:3231RHSA-2021:3232RHSA-2021:3233RHSA-2021:3234UBUNTU-CVE-2021-31291USN-5028-1
Published 26-07-2021Last modified 06-08-2021
Rejected
This record was rejected and should not be used. The data below is kept for reference.Vulnerability summary
CVE-2021-31291 is a high (CVSS 8.1) vulnerability in exiv2.
CVSS score
8.1/10
010
High · v3.1 (OSV · Red hat), selected by version preferenceEPSS score
Not scored
0%100%
No EPSS score yetKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 5 · Related 5Timeline
- 26-07-2021PublishedVulnerability first disclosed.
- 06-08-2021Last modifiedVulnerability information updated.
Description
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-29457. Reason: This candidate is a duplicate of CVE-2021-29457. Notes: All CVE users should reference CVE-2021-29457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVSS metrics
2 scores · 2 sources · 1 versionHigh 8.1Preferred score · OSV · Red hat (Ecosystem advisory) · calculated from vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 2 agree
- OSV · UbuntuEcosystem advisory · calculated8.1HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat12 products
- compat-exiv2-023< 0:0.23-2.el7_9
- compat-exiv2-023-debuginfo< 0:0.23-2.el7_9
- compat-exiv2-026< 0:0.26-4.el8_4 | < 0:0.26-4.el8_2 | < 0:0.26-3.el7_9
- compat-exiv2-026-debuginfo< 0:0.26-4.el8_4 | < 0:0.26-4.el8_2 | < 0:0.26-3.el7_9
- compat-exiv2-026-debugsource< 0:0.26-4.el8_4 | < 0:0.26-4.el8_2
Mageia1 product
- exiv2< 0.27.3-1.2.mga8
Ubuntu1 product
- exiv2< 0.25-2.1ubuntu16.04.7+esm3 | < 0.25-3.1ubuntu0.18.04.10 | < 0.27.2-8ubuntu2.5
3 vendors · 14 products
