Lucene search
Cloud FoundryCFOUNDRY:F8F590C4EA2497964E8F2BE7C4D6BD17HistoryDec 05, 2019 - 12:00 a.m.
USN-4199-1: libvpx vulnerabilities | Cloud Foundry
2019-12-0500:00:00
Cloud Foundry
www.cloudfoundry.org
42
EPSS
0.011
Percentile
84.5%
Severity
Low
Vendor
Canonical Ubuntu
Versions Affected
- Canonical Ubuntu 18.04
Description
It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
CVEs contained in this USN include: CVE-2017-13194, CVE-2019-2126, CVE-2019-9232, CVE-2019-9325, CVE-2019-9371, CVE-2019-9433
Affected Cloud Foundry Products and Versions
Severity is low unless otherwise noted.
- All versions of Cloud Foundry cflinuxfs3 prior to 0.147.0
Mitigation
Users of affected products are strongly encouraged to follow one of the mitigations below:
- The Cloud Foundry project recommends that Cloud Foundry deployments run with cflinuxfs3 version 0.147.0 or later.
References
Related
ubuntu
ubuntu
libvpx vulnerabilities
2019-11-25 00:00:00
libvpx vulnerabilities
2020-07-15 00:00:00
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : libvpx vulnerabilities (USN-4199-1)
2019-11-26 00:00:00
Fedora 30 : libvpx (2020-6cd410d9e4)
2020-01-27 00:00:00
Fedora 31 : libvpx (2020-65eac1b48b)
2020-01-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4199-1)
2019-11-26 00:00:00
Fedora: Security Advisory for libvpx (FEDORA-2020-6cd410d9e4)
2020-01-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0143-1)
2021-04-19 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: libvpx-1.8.2-1.fc30
2020-01-24 18:51:39
[SECURITY] Fedora 31 Update: libvpx-1.8.2-1.fc31
2020-01-13 02:21:23
[SECURITY] Fedora 27 Update: libvpx-1.6.1-5.fc27
2018-01-23 21:52:48
suse
suse
Security update for libvpx (important)
2020-01-26 00:00:00
debian
debian
[SECURITY] [DSA 4578-1] libvpx security update
2019-11-28 19:47:36
[SECURITY] [DLA 2012-1] libvpx security update
2019-11-26 22:30:48
[SECURITY] [DLA 1290-1] libvpx security update
2018-02-24 14:46:13
gentoo
gentoo
libvpx: User-assisted execution of arbitrary code
2020-03-26 00:00:00
osv
osv
Moderate: libvpx security update
2020-11-03 12:21:50
Moderate: libvpx security update
2020-11-03 12:21:50
libvpx - security update
2019-11-28 00:00:00
rocky
rocky
libvpx security update
2020-11-03 12:21:50
almalinux
almalinux
Moderate: libvpx security update
2020-11-03 12:21:50
redhat
redhat
(RHSA-2020:4629) Moderate: libvpx security update
2020-11-03 12:21:50
(RHSA-2020:3876) Moderate: libvpx security update
2020-09-29 07:39:42
oraclelinux
oraclelinux
libvpx security update
2020-11-10 00:00:00
libvpx security update
2020-10-06 00:00:00
mageia
mageia
Updated libvpx packages fix security vulnerabilities
2019-12-06 17:15:42
Updated libvpx packages fix security vulnerability
2018-02-06 09:25:44
centos
centos
libvpx security update
2020-10-20 18:26:54
amazon
amazon
prion
prion
Out-of-bounds
2019-09-27 19:15:00
Design/Logic Flaw
2018-01-12 23:29:00
Out-of-bounds
2019-09-27 19:15:00
nvd
nvd
cvelist
cvelist
debiancve
debiancve
ubuntucve
ubuntucve
redhatcve
redhatcve
cve
cve
alpinelinux
alpinelinux
veracode
veracode
Out Of Bounds Read
2020-01-21 05:57:48
Out Of Bounds Read (OOB)
2020-02-26 06:37:35
Denial Of Service (DoS)
2020-07-27 06:40:38
androidsecurity
androidsecurity
Pixel / Nexus Security Bulletin—January 2018
2018-01-02 00:00:00
Android 10 Security Release Notes
2019-08-20 00:00:00