CVSS4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N
AI Score
Confidence
High
An update is available for libvpx.
This update affects Rocky Linux 8.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.
Security Fix(es):
libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
rocky | 8 | aarch64 | libvpx | < 1.7.0-11.el8_10 | libvpx-0:1.7.0-11.el8_10.aarch64.rpm |
rocky | 8 | i686 | libvpx | < 1.7.0-11.el8_10 | libvpx-0:1.7.0-11.el8_10.i686.rpm |
rocky | 8 | x86_64 | libvpx | < 1.7.0-11.el8_10 | libvpx-0:1.7.0-11.el8_10.x86_64.rpm |
rocky | 8 | aarch64 | libvpx-debuginfo | < 1.7.0-11.el8_10 | libvpx-debuginfo-0:1.7.0-11.el8_10.aarch64.rpm |
rocky | 8 | i686 | libvpx-debuginfo | < 1.7.0-11.el8_10 | libvpx-debuginfo-0:1.7.0-11.el8_10.i686.rpm |
rocky | 8 | x86_64 | libvpx-debuginfo | < 1.7.0-11.el8_10 | libvpx-debuginfo-0:1.7.0-11.el8_10.x86_64.rpm |
rocky | 8 | aarch64 | libvpx-debugsource | < 1.7.0-11.el8_10 | libvpx-debugsource-0:1.7.0-11.el8_10.aarch64.rpm |
rocky | 8 | i686 | libvpx-debugsource | < 1.7.0-11.el8_10 | libvpx-debugsource-0:1.7.0-11.el8_10.i686.rpm |
rocky | 8 | x86_64 | libvpx-debugsource | < 1.7.0-11.el8_10 | libvpx-debugsource-0:1.7.0-11.el8_10.x86_64.rpm |
rocky | 8 | aarch64 | libvpx-devel | < 1.7.0-11.el8_10 | libvpx-devel-0:1.7.0-11.el8_10.aarch64.rpm |