OPENSUSE-SU-2020:0680-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. This update was imported from the SUSE:SLE-15:Update update project...

Security update for libvpx (moderate)

openSUSE Security Update: Security update for libvpx Announcement ID: openSUSE-SU-2020:0680-1 Rating: moderate References: 1166066 Cross-References: CVE-2020-0034 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for libvpx fix...

SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:1297-1)

This update for libvpx fixes the following issues : CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clea...

SUSE-SU-2020:1297-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066...

The vulnerability of the multimedia library libvpx, related to insufficient validation of input data, allows attackers to trigger service failures.

The vulnerability of the multimedia library libvpx is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the multimedia library libvpx, related to reading beyond the buffer boundaries of memory, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the multimedia library libvpx is related to a memory-bound read error. Exploiting this vulnerability could allow an attacker to gain access to confidential data remotely...

The vulnerability of the multimedia library libvpx, related to reading beyond the buffer boundary of memory, allows attackers to gain access to confidential data.

The vulnerability of the multimedia library libvpx relates to reading data beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability of the multimedia library libvpx, related to insufficient validation of input data, allows attackers to gain access to confidential information.

The vulnerability of the multimedia library libvpx is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

Arbitrary Code Execution

libvpx is vulnerable to arbitrary code execution. An integer overflow flaw, leading to arbitrary memory writes, was found in libvpx. An attacker could create a specially-crafted video encoded using the VP8 codec that, when played by a victim with an application using libvpx such as Totem, would...

GLSA-202003-59 : libvpx: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-202003-59 libvpx: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to...

libvpx: User-assisted execution of arbitrary code

Background libvpx is the VP8 codec SDK used to encode and decode video streams, typically within a WebM format media file. Description Multiple vulnerabilities have been discovered in libvpx. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a...

Debian DLA-2136-1 : libvpx security update

It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 'Jessie', this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommend that you upgrade your libvpx packages. NOTE: Tenable Network...

Debian: Security Advisory (DLA-2136-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2136-1] libvpx security update

Package : libvpx Version : 1.3.0-3+deb8u3 CVE ID : CVE-2020-0034 It was discovered that there was an out-of-bounds buffer read vulnerability in libvpx, a library implementing the VP8 & VP9 video codecs. For Debian 8 "Jessie", this issue has been fixed in libvpx version 1.3.0-3+deb8u3. We recommen...

DLA-2136-1 libvpx - security update

Bulletin has no description...

SUSE SLES12 Security Update : libvpx (SUSE-SU-2020:0459-1)

This update for libvpx fixes the following issues : CVE-2019-9232: Fixed an out of bound memory access bsc1160613. CVE-2019-9433: Fixdd a use-after-free in vp8deblock bsc1160614. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...

SUSE-SU-2020:0459-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2019-9232: Fixed an out of bound memory access bsc1160613. - CVE-2019-9433: Fixdd a use-after-free in vp8deblock bsc1160614...

EulerOS 2.0 SP8 : libvpx (EulerOS-SA-2020-1185)

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libvpx provides the VP8/VP9 SDK, which allows you to integrate your applications with the VP8 and VP9 video codecs, high quality, royalty free, open...

Huawei EulerOS: Security Advisory for libvpx (EulerOS-SA-2020-1185)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 30 : libvpx (2020-6cd410d9e4)

Update to 1.8.2. Fixes several security vulnerabilities: CVE-2019-9232, CVE 2019-9433, CVE-2019-9325, CVE-2019-9371, CVE-2019-2126 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automaticall...