Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2020:3876
HistorySep 29, 2020 - 7:39 a.m.

(RHSA-2020:3876) Moderate: libvpx security update

2020-09-2907:39:42
access.redhat.com
14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.012 Low

EPSS

Percentile

84.9%

JSON

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

  • libvpx: Denial of service in mediaserver (CVE-2017-0393)

  • libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

  • libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

  • libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c (CVE-2020-0034)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes linked from the References section.

Related

nessus 36
centos 1
amazon 1
oraclelinux 2
osv 10
openvas 23
debian 4
ubuntu 3
redhat 1
almalinux 1
rocky 1
gentoo 1
prion 4
ubuntucve 4
fedora 2
debiancve 4
suse 2
cve 4
alpinelinux 3
veracode 3
redhatcve 4
cloudfoundry 1
threatpost 1
ibm 1
androidsecurity 3
nessus
nessus
NewStart CGSL CORE 5.05 / MAIN 5.05 : libvpx Multiple Vulnerabilities (NS-SA-2021-0147)
2021-10-27 00:00:00
RHEL 7 : libvpx (RHSA-2020:3876)
2020-09-29 00:00:00
Oracle Linux 7 : libvpx (ELSA-2020-3876)
2020-10-07 00:00:00
centos
centos
libvpx security update
2020-10-20 18:26:54
amazon
amazon
Medium: libvpx
2020-11-09 17:10:00
oraclelinux
oraclelinux
libvpx security update
2020-10-06 00:00:00
libvpx security update
2020-11-10 00:00:00
osv
osv
libvpx - security update
2019-11-26 00:00:00
libvpx - security update
2019-11-28 00:00:00
Moderate: libvpx security update
2020-11-03 12:21:50
openvas
openvas
Debian: Security Advisory (DLA-2012-1)
2019-11-27 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:0459-1)
2021-04-19 00:00:00
Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2021-1322)
2021-02-22 00:00:00
debian
debian
[SECURITY] [DLA 2012-1] libvpx security update
2019-11-26 22:30:48
[SECURITY] [DSA 4578-1] libvpx security update
2019-11-28 19:47:36
[SECURITY] [DLA 2136-1] libvpx security update
2020-03-09 18:33:47
ubuntu
ubuntu
libvpx vulnerabilities
2020-07-15 00:00:00
libvpx vulnerabilities
2019-11-25 00:00:00
libvpx vulnerability
2022-09-26 00:00:00
redhat
redhat
(RHSA-2020:4629) Moderate: libvpx security update
2020-11-03 12:21:50
almalinux
almalinux
Moderate: libvpx security update
2020-11-03 12:21:50
rocky
rocky
libvpx security update
2020-11-03 12:21:50
gentoo
gentoo
libvpx: User-assisted execution of arbitrary code
2020-03-26 00:00:00
prion
prion
Out-of-bounds
2019-09-27 19:15:00
Information disclosure
2019-09-27 19:15:00
Denial of service
2017-01-12 20:59:00
ubuntucve
ubuntucve
CVE-2019-9232
2019-09-27 00:00:00
CVE-2019-9433
2019-09-27 00:00:00
CVE-2017-0393
2017-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: libvpx-1.8.2-1.fc31
2020-01-13 02:21:23
[SECURITY] Fedora 30 Update: libvpx-1.8.2-1.fc30
2020-01-24 18:51:39
debiancve
debiancve
CVE-2019-9232
2019-09-27 19:15:00
CVE-2019-9433
2019-09-27 19:15:00
CVE-2017-0393
2017-01-12 20:59:00
suse
suse
Security update for libvpx (important)
2020-01-26 00:00:00
Security update for libvpx (moderate)
2020-05-23 00:00:00
cve
cve
CVE-2019-9232
2019-09-27 19:15:00
CVE-2019-9433
2019-09-27 19:15:00
CVE-2017-0393
2017-01-12 20:59:00
alpinelinux
alpinelinux
CVE-2019-9232
2019-09-27 19:15:00
CVE-2019-9433
2019-09-27 19:15:00
CVE-2020-0034
2020-03-10 20:15:00
veracode
veracode
Out Of Bounds Read (OOB)
2020-02-26 06:37:35
Information Disclosure
2020-01-16 05:52:55
Information Disclosure
2020-03-12 08:25:22
redhatcve
redhatcve
CVE-2019-9232
2020-01-08 13:38:58
CVE-2019-9433
2020-01-08 14:39:08
CVE-2017-0393
2019-11-07 06:25:27
cloudfoundry
cloudfoundry
USN-4199-1: libvpx vulnerabilities | Cloud Foundry
2019-12-05 00:00:00
threatpost
threatpost
MediaTek Bug Actively Exploited, Affects Millions of Android Devices
2020-03-03 19:02:22
ibm
ibm
Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
2021-01-27 00:05:57
androidsecurity
androidsecurity
Android Security Bulletin—March 2020
2020-03-02 00:00:00
Android Security Bulletin—January 2017
2017-01-03 00:00:00
Android 10 Security Release Notes
2019-08-20 00:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.012 Low

EPSS

Percentile

84.9%

JSON
Related for RHSA-2020:3876
nessus36centos1amazon1oraclelinux2osv10openvas23debian4ubuntu3redhat1almalinux1rocky1gentoo1prion4ubuntucve4fedora2debiancve4suse2cve4alpinelinux3veracode3redhatcve4cloudfoundry1threatpost1ibm1androidsecurity3