1135 matches found
Fedora 37 : libwebp (2023-3388038193)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-3388038193 advisory. Backport fix for CVE-2023-4863. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
[SECURITY] Fedora 39 Update: libwebp-1.3.1-3.fc39
WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...
Heap Buffer Overflow
libwebp.so is vulnerable to Out Of Bounds Memory Write. The vulnerability is due to the BuildHuffmanTable function in src/dec/vp8ldec.c improperly allocating memory to the table when parsing a stream, which results in an application crash or Arbitrary Code Execution when reading a crafted webp...
[SECURITY] Fedora 38 Update: libwebp-1.3.1-3.fc38
WebP is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently...
Debian: Security Advisory (DSA-5497-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Slackware: Security Advisory (SSA:2023-257-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-6369-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 37 : firefox (2023-31fe7ee034)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-31fe7ee034 advisory. - Updated to latest upstream 117.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
Fedora 38 : firefox (2023-c7af372e2e)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c7af372e2e advisory. - Updated to latest upstream 117.0.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...
Fedora 38 : libwebp (2023-c4fa8a204d)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-c4fa8a204d advisory. Backport fix for CVE-2023-4863. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
[slackware-security] libwebp
New libwebp packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libwebp-1.3.2-i586-1slack15.0.txz: Upgraded. Security fix for lossless decoder chromium: 1479274, CVE-2023-4863. For more informatio...
CVE-2023-4863
A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...
Debian DSA-5497-1 : libwebp - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5497 advisory. A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For the stable distribution bookworm, this problem has been fixed in version...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : libwebp vulnerability (USN-6369-1)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6369-1 advisory. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a special...
[SECURITY] [DSA 5497-1] libwebp security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5497-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 13, 2023 https://www.debian.org/security/faq -...
SUSE CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...
DSA-5497-1 libwebp - security update
Bulletin has no description...
DSA-5497-2 libwebp - security update
Bulletin has no description...
The vulnerability of the libwebp library lies in its ability to read images in the WebP format beyond the buffer limit in memory. This allows an attacker to execute arbitrary code.
The vulnerability of the libwebp library for encoding and decoding WebP images involves reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
