Scientific Linux Security Update : libvpx on SL7.x x86_64 (20201001)

Security Fixes : - libvpx: Denial of service in mediaserver CVE-2017-0393 - libvpx: Out of bounds read in vp8norm table CVE-2019-9232 - libvpx: Use-after-free in vp8deblock in vp8/common/postproc.c CVE-2019-9433 - libvpx: Out of bounds read in vp8decodeframe in decodeframe.c CVE-2020-0034 C Tenab...

libvpx security update

CentOS Errata and Security Advisory CESA-2020:3876 An update for libvpx is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CentOS 7 : libvpx (RHSA-2020:3876)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory. - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or...

Oracle Linux 7 : libvpx (ELSA-2020-3876)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3876 advisory. - Fix for CVE-2020-0034 - Fix for CVE-2019-9232 and CVE-2019-9433 - Fix for CVE-2017-0393 - apply patch from upstream git Change I6266aba7, should...

Moderate: Red Hat Security Advisory: libvpx security update

An update for libvpx is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c

In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354...

libvpx: Denial of service in mediaserver

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-2060)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 7 : libvpx (RHSA-2020:3876)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory. The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimed...

EulerOS 2.0 SP3 : libvpx (EulerOS-SA-2020-2060)

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In vp8decodeframe of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-1867)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : libvpx (EulerOS-SA-2020-1867)

According to the versions of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Check in libvpx, due to lack of boundaries, may read crossing the line.This can lead to a remote information leakage, without other executive...

USN-4199-2: libvpx vulnerabilities

USN-4199-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted We...

USN-4199-2 libvpx vulnerabilities

USN-4199-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted We...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:1297-2)

This update for libvpx fixes the following issues : CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE-SU-2020:1297-2 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-1609)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libvpx (EulerOS-SA-2020-1609)

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Disclaimer: The entry creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability...

openSUSE Security Update : libvpx (openSUSE-2020-680)

This update for libvpx fixes the following issues : - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. This update was imported from the SUSE:SLE-15:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

openSUSE: Security Advisory for libvpx (openSUSE-SU-2020:0680-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...