CVE-2021-22204
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 6.8epss 100%
da publicação à arma18 dias
Publicada no NVD23 de abr.
1ª PoC+18d
metasploit14 de abr.
CISA KEV+208d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
simCISA + VulnCheck
34 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2021-12-01
Apply updates per vendor instructions.
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
ExifTool · ExifToolPoCs públicas encontradas — 34
exploitdbwww.exploit-db.com/exploits/50911não verificadogithubgithub.com/convisolabs/CVE-2021-22204-exiftool★ 97githubgithub.com/UNICORDev/exploit-CVE-2021-22204★ 53githubgithub.com/AssassinUKG/CVE-2021-22204★ 27githubgithub.com/se162xg/CVE-2021-22204★ 12githubgithub.com/bilkoh/POC-CVE-2021-22204★ 8githubgithub.com/Akash7350/CVE-2021-22204★ 4githubgithub.com/trganda/CVE-2021-22204★ 3githubgithub.com/PenTestical/CVE-2021-22204★ 3githubgithub.com/ph-arm/CVE-2021-22204-Gitlab★ 2githubgithub.com/Asaad27/CVE-2021-22204-RSE★ 0githubgithub.com/battleofthebots/dejavu★ 0githubgithub.com/cc3305/CVE-2021-22204★ 0githubgithub.com/Roronoawjd/CVE-2021-22204★ 0githubgithub.com/d4ytox/CVE-2021-22204★ 0vulncheckvulncheck.com/xdb/c7544f312048não verificadocve_referencepacketstormsecurity.com/files/162558/ExifTool-DjVu-ANT-Perl-Injection.htmlnão verificadocve_referencepacketstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.htmlnão verificadovulncheckvulncheck.com/xdb/11cab1d195ednão verificadovulncheckvulncheck.com/xdb/793a0410f319não verificadovulncheckvulncheck.com/xdb/195f85ead56cnão verificadovulncheckvulncheck.com/xdb/0e17974417e2não verificadovulncheckvulncheck.com/xdb/c7f016c6ff9cnão verificadovulncheckvulncheck.com/xdb/c1144f28258fnão verificadovulncheckvulncheck.com/xdb/0c2c0a7d6b52não verificadovulncheckvulncheck.com/xdb/228b3b833130não verificadovulncheckvulncheck.com/xdb/2e739ce176b6não verificadovulncheckvulncheck.com/xdb/c1c6e7d5d1dcnão verificadovulncheckvulncheck.com/xdb/9c966b28d48anão verificadovulncheckvulncheck.com/xdb/72105893a08anão verificadocve_referencepacketstormsecurity.com/files/167038/ExifTool-12.23-Arbitrary-Code-Execution.htmlnão verificadocve_referencepacketstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/5ad37e033ef8não verificadovulncheckvulncheck.com/xdb/162401353b6bnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/162558/ExifTool-DjVu-ANT-Perl-Injection.htmlhttp://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.htmlhttp://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/167038/ExifTool-12.23-Arbitrary-Code-Execution.htmlhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22204.jsonhttps://hackerone.com/reports/1154542https://lists.debian.org/debian-lts-announce/2021/05/msg00018.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDKDLJLBTBBR66OOPXSXCG2PQRM5KCZL/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6UOBPU3LSHAPRRJNISNVXZ5DSUIALLV/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4RF6PJCJ6NQOVJJJF6HN6BORUQVIXY6/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22204