Ubuntu.comUB:CVE-2023-1999CVE-2023-1999
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
28.9%
There exists a use after free/double free in libwebp. An attacker can use
the ApplyFiltersAndEncode() function and loop through to free best.bw and
assign best = trial pointer. The second loop will then return 0 because of
an Out of memory error in VP8 encoder, the pointer is still assigned to
trial and the AddressSanitizer will attempt a double free.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035371>
- <https://bugzilla.mozilla.org/show_bug.cgi?id=1819244 (not public)>
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | libwebp | < 0.6.1-2ubuntu0.18.04.2 | UNKNOWN |
| ubuntu | 20.04 | noarch | libwebp | < 0.6.1-2ubuntu0.20.04.2 | UNKNOWN |
| ubuntu | 22.04 | noarch | libwebp | < 1.2.2-2ubuntu0.22.04.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | libwebp | < 1.2.2-2ubuntu0.22.10.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | libwebp | < 1.2.4-0.1ubuntu0.23.04.1 | UNKNOWN |
| ubuntu | 23.10 | noarch | libwebp | < 1.2.4-0.1ubuntu1 | UNKNOWN |
| ubuntu | 24.04 | noarch | libwebp | < 1.2.4-0.1ubuntu1 | UNKNOWN |
| ubuntu | 14.04 | noarch | libwebp | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | libwebp | < 0.4.4-1ubuntu0.1~esm2 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2023-1999
nvd.nist.gov/vuln/detail/CVE-2023-1999
security-tracker.debian.org/tracker/CVE-2023-1999
ubuntu.com/security/notices/USN-6078-1
ubuntu.com/security/notices/USN-6078-2
www.cve.org/CVERecord?id=CVE-2023-1999
www.mozilla.org/en-US/security/advisories/mfsa2023-13/#CVE-2023-1999
www.mozilla.org/en-US/security/advisories/mfsa2023-14/#CVE-2023-1999
www.mozilla.org/en-US/security/advisories/mfsa2023-15/#CVE-2023-1999
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
28.9%