Lucene search
ROSA LABROSA-SA-2024-2358HistoryFeb 20, 2024 - 10:32 a.m.
Advisory ROSA-SA-2024-2358
2024-02-2010:32:20
ROSA LAB
abf.rosalinux.ru
7
libwebp
vulnerability fix
apply filters
memory error
vp8 encoder
address sanitizer
update
rosa-chrome
Software: libwebp 1.2.3
OS: ROSA-CHROME
package_evr_string: libwebp-1.2.3-1.src.rpm
CVE-ID: CVE-2023-1999
BDU-ID: None
CVE-Crit: MEDIUM
CVE-DESC.: There is a use after free/double free in libwebp. An attacker could use ApplyFiltersAndEncode() to free best.bw and assign the pointer best = Trial. The second loop will then return 0 due to a “Not enough memory” error in the VP8 encoder, the pointer is still assigned to Trial, and AddressSanitizer will attempt a double free.
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update libwebp
Related
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libwebp (SUSE-SU-2023:2490-1)
2023-06-14 00:00:00
EulerOS Virtualization 3.0.6.6 : libwebp (EulerOS-SA-2023-3402)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : libwebp (EulerOS-SA-2023-2695)
2024-01-16 00:00:00
oraclelinux
oraclelinux
libwebp security update
2023-05-02 00:00:00
libwebp security update
2023-05-02 00:00:00
libwebp security update
2023-05-02 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-3402)
2023-12-14 00:00:00
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2543)
2023-08-03 00:00:00
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2385)
2023-07-17 00:00:00
redhat
redhat
(RHSA-2023:2075) Important: libwebp security update
2023-05-02 07:19:40
(RHSA-2023:2073) Important: libwebp security update
2023-05-02 06:53:01
(RHSA-2023:2072) Important: libwebp security update
2023-05-02 06:42:08
ubuntu
ubuntu
libwebp vulnerability
2023-07-18 00:00:00
libwebp vulnerability
2023-05-16 00:00:00
alpinelinux
alpinelinux
CVE-2023-1999
2023-06-20 12:15:09
osv
osv
Important: libwebp security update
2023-05-02 00:00:00
Important: libwebp security update
2023-05-25 20:21:42
Important: libwebp security update
2023-05-02 00:00:00
centos
centos
libwebp security update
2023-07-27 14:42:41
firefox security update
2023-04-24 17:46:00
thunderbird security update
2023-04-24 14:49:28
almalinux
almalinux
Important: libwebp security update
2023-05-02 00:00:00
Important: libwebp security update
2023-05-02 00:00:00
rocky
rocky
libwebp security update
2023-05-25 20:21:42
libwebp security update
2023-05-05 15:41:17
mscve
mscve
Chromium: CVE-2023-1999 Use after free in libwebp
2023-09-29 16:24:23
cve
cve
CVE-2023-1999
2023-06-20 12:15:09
debiancve
debiancve
CVE-2023-1999
2023-06-20 12:15:09
ubuntucve
ubuntucve
CVE-2023-1999
2023-05-08 00:00:00
debian
debian
[SECURITY] [DLA 3439-1] libwebp security update
2023-05-31 14:32:57
[SECURITY] [DSA 5408-1] libwebp security update
2023-05-21 18:08:42
cloudlinux
cloudlinux
libwebp: Fix of CVE-2023-1999
2023-10-12 18:41:30
redhatcve
redhatcve
CVE-2023-1999
2023-04-28 09:51:35
prion
prion
Double free
2023-06-20 12:15:00
cloudfoundry
cloudfoundry
USN-6078-1: libwebp vulnerability | Cloud Foundry
2023-05-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-1999 affecting package libwebp for versions less than 1.3.2-1
2023-10-04 16:53:46
cvelist
cvelist
CVE-2023-1999 Use after free in libwebp
2023-06-20 11:28:52
veracode
veracode
Double-Free
2023-06-04 19:09:20
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0061
2023-07-29 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0626
2023-08-03 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0441
2023-07-30 00:00:00
gentoo
gentoo
WebP: Multiple vulnerabilities
2023-09-17 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
kaspersky
kaspersky
KLA61043 Multiple vulnerabilities in Microsoft Browser
2023-09-29 00:00:00
KLA48841 Multiple vulnerabilities in Mozilla Firefox ESR
2023-04-11 00:00:00
KLA48840 Multiple vulnerabilities in Mozilla Thunderbird
2023-04-11 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2184
2023-07-11 11:09:54
amazon
amazon
Important: thunderbird
2023-04-27 18:37:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.10 — Mozilla
2023-04-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.10 — Mozilla
2023-04-11 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00