Lucene search
AmazonALAS2-2023-2291HistoryOct 12, 2023 - 3:08 p.m.
Important: thunderbird
2023-10-1215:08:00
alas.aws.amazon.com
30
heap buffer overflow
thunderbird
webp
update
cve-2023-4863
amazon linux 2
Issue Overview:
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) (CVE-2023-4863)
Affected Packages:
thunderbird
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update thunderbird to update your system.
New Packages:
aarch64:
thunderbird-102.15.1-1.amzn2.0.1.aarch64
thunderbird-debuginfo-102.15.1-1.amzn2.0.1.aarch64
src:
thunderbird-102.15.1-1.amzn2.0.1.src
x86_64:
thunderbird-102.15.1-1.amzn2.0.1.x86_64
thunderbird-debuginfo-102.15.1-1.amzn2.0.1.x86_64
Additional References
Red Hat: CVE-2023-4863
Mitre: CVE-2023-4863
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Amazon Linux | 2 | aarch64 | thunderbird | < 102.15.1-1.amzn2.0.1 | thunderbird-102.15.1-1.amzn2.0.1.aarch64.rpm |
| Amazon Linux | 2 | aarch64 | thunderbird-debuginfo | < 102.15.1-1.amzn2.0.1 | thunderbird-debuginfo-102.15.1-1.amzn2.0.1.aarch64.rpm |
| Amazon Linux | 2 | src | thunderbird | < 102.15.1-1.amzn2.0.1 | thunderbird-102.15.1-1.amzn2.0.1.src.rpm |
| Amazon Linux | 2 | x86_64 | thunderbird | < 102.15.1-1.amzn2.0.1 | thunderbird-102.15.1-1.amzn2.0.1.x86_64.rpm |
| Amazon Linux | 2 | x86_64 | thunderbird-debuginfo | < 102.15.1-1.amzn2.0.1 | thunderbird-debuginfo-102.15.1-1.amzn2.0.1.x86_64.rpm |
Related
nessus
nessus
EulerOS Virtualization 2.10.1 : libwebp (EulerOS-SA-2023-3505)
2024-01-16 00:00:00
Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2023-256-04)
2023-09-14 00:00:00
Slackware Linux 15.0 / current libwebp Vulnerability (SSA:2023-257-01)
2023-09-14 00:00:00
osv
osv
PYSEC-2023-183
2023-09-29 21:31:40
Important: libwebp security update
2023-09-19 00:00:00
redos
redos
ROS-20230920-03
2023-09-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-4863 affecting package libwebp for versions less than 1.3.2-1
2023-10-04 16:53:46
oraclelinux
oraclelinux
firefox security update
2023-09-19 00:00:00
firefox security update
2023-09-19 00:00:00
thunderbird security update
2023-09-19 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2024-1149)
2024-02-09 00:00:00
Fedora: Security Advisory (FEDORA-2023-f8319bd876)
2023-09-16 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-29, MFSA2023-12) - Mac OS X
2023-09-14 00:00:00
cisa_kev
cisa_kev
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
2023-09-13 00:00:00
almalinux
almalinux
Important: firefox security update
2023-09-18 00:00:00
Important: thunderbird security update
2023-09-18 00:00:00
Important: libwebp security update
2023-09-19 00:00:00
gitlab
gitlab
CefSharp affected by heap buffer overflow in WebP
2023-09-21 00:00:00
CefSharp affected by heap buffer overflow in WebP
2023-09-21 00:00:00
rocky
rocky
libwebp security update
2023-09-26 13:26:19
firefox security update
2023-09-19 12:09:00
debian
debian
[SECURITY] [DSA 5497-2] libwebp security update
2023-09-17 15:33:28
[SECURITY] [DLA 3569-1] thunderbird security update
2023-09-17 09:42:33
[SECURITY] [DSA 5497-1] libwebp security update
2023-09-13 21:07:56
github
github
Bundled libwebp in pywebp vulnerable
2023-10-06 16:59:22
opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
2024-08-30 23:37:19
libwebp: OOB write in BuildHuffmanTable
2023-09-12 15:30:20
cloudfoundry
cloudfoundry
USN-6369-1: libwebp vulnerability | Cloud Foundry
2023-10-12 00:00:00
ibm
ibm
amazon
amazon
Important: qt5-qtimageformats
2023-11-09 19:19:00
debiancve
debiancve
CVE-2023-4863
2023-09-12 15:15:24
alpinelinux
alpinelinux
CVE-2023-4863
2023-09-12 15:15:24
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Google Chrome
2023-10-05 03:28:23
Exploit for Out-of-bounds Write in Google Chrome
2024-02-03 12:27:37
Exploit for Out-of-bounds Write in Google Chrome
2023-12-18 23:12:25
hivepro
hivepro
Google Addresses Fourth Zero-Day Flaw Exploited by Attackers Wildly
2023-09-12 13:05:09
wolfi
wolfi
CVE-2023-4863 vulnerabilities
2024-10-07 09:13:36
ubuntucve
ubuntucve
CVE-2023-4863
2023-09-12 00:00:00
redhatcve
redhatcve
CVE-2023-4863
2023-09-14 14:24:56
slackware
slackware
[slackware-security] libwebp
2023-09-14 21:21:47
[slackware-security] seamonkey
2023-09-21 19:43:16
veracode
veracode
Heap Buffer Overflow
2023-09-19 21:25:54
Heap Buffer Overflow
2023-09-15 13:45:13
redhat
redhat
(RHSA-2023:5222) Important: libwebp security update
2023-09-19 07:11:07
ubuntu
ubuntu
libwebp vulnerability
2023-09-14 00:00:00
libwebp vulnerability
2023-09-28 00:00:00
Firefox vulnerability
2023-09-14 00:00:00
mscve
mscve
Chromium: CVE-2023-4863 Heap buffer overflow in WebP
2023-09-12 07:00:47
ics
ics
Siemens Mendix Studio Pro
2023-11-16 12:00:00
kaspersky
kaspersky
KLA60003 DoS vulnerability in Google Chrome
2023-09-11 00:00:00
thn
thn
fedora
fedora
[SECURITY] Fedora 38 Update: libwebp-1.3.1-3.fc38
2023-09-15 01:43:00
freebsd
freebsd
libwebp heap buffer overflow
2023-09-12 00:00:00
cnvd
cnvd
Google Chrome Buffer Overflow Vulnerability (CNVD-2023-71680)
2023-09-15 00:00:00