In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354

This plugin has been deprecated as it does not adhere to established standards for this style of check.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:4629 advisory.

  - In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a     freed pointer. This could lead to remote code execution with no additional execution privileges needed.
    User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1     Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368. (CVE-2019-2126)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to     remote denial of service with no additional execution privileges needed. User interaction is needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254 (CVE-2019-9371)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2020:4629 advisory.

  - In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a     freed pointer. This could lead to remote code execution with no additional execution privileges needed.
    User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1     Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368. (CVE-2019-2126)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to     remote denial of service with no additional execution privileges needed. User interaction is needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254 (CVE-2019-9371)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has libvpx packages installed that are affected by multiple vulnerabilities:

  - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or reboot. This issue is rated as High due to the     possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,     7.1. Android ID: A-30436808. (CVE-2017-0393)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

  - In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input     validation. This could lead to remote information disclosure if error correction were turned on, with no     additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 (CVE-2020-0034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A denial of service vulnerability in libvpx in     Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or     reboot. This issue is rated as High due to the     possibility of remote denial of service. Product:
    Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,     7.0, 7.1. Android ID: A-30436808.(CVE-2017-0393)

  - In libvpx, there is a possible information disclosure     due to improper input validation. This could lead to     remote information disclosure with no additional     execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions:
    Android-10Android ID: A-80479354(CVE-2019-9433)

  - libvpx contains an out-of-bounds read flaw in the     vp8_mv_bit_cost() and mv_err_cost() functions in     vp8/encoder/mcomp.c that is triggered as certain input     is not properly validated. This may allow a     context-dependent attacker to crash a process linked     against the library or potentially disclose sensitive     memory contents.(CVE-2018-9349)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.02, has libvpx packages installed that are affected by multiple vulnerabilities:

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

  - In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to     remote denial of service with no additional execution privileges needed. User interaction is needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254 (CVE-2019-9371)

  - In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a     freed pointer. This could lead to remote code execution with no additional execution privileges needed.
    User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1     Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127702368. (CVE-2019-2126)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libvpx packages installed that are affected by multiple vulnerabilities:

  - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or reboot. This issue is rated as High due to the     possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,     7.1. Android ID: A-30436808. (CVE-2017-0393)

  - In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input     validation. This could lead to remote information disclosure if error correction were turned on, with no     additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 (CVE-2020-0034)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - A denial of service vulnerability in libvpx in     Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or     reboot. This issue is rated as High due to the     possibility of remote denial of service. Product:
    Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,     7.0, 7.1. Android ID: A-30436808.(CVE-2017-0393)

  - In libvpx, there is a possible information disclosure     due to improper input validation. This could lead to     remote information disclosure with no additional     execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions:
    Android-10Android ID: A-80479354(CVE-2019-9433)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:4629 advisory.

  - libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)

  - libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

  - libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)

  - libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libvpx package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - In libvpx, there is a possible information disclosure     due to improper input validation. This could lead to     remote information disclosure with no additional     execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions:
    Android-10Android ID: A-80479354(CVE-2019-9433)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4629 advisory.

    - Fix for CVE-2019-9232, CVE-2019-9433, CVE-2019-9371, CVE-2019-2126

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1558 advisory.

  - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or reboot. This issue is rated as High due to the     possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,     7.1. Android ID: A-30436808. (CVE-2017-0393)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

  - In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input     validation. This could lead to remote information disclosure if error correction were turned on, with no     additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 (CVE-2020-0034)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4629 advisory.

    The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec,     commonly used with the WebM multimedia container file format.

    Security Fix(es):

    * libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)

    * libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

    * libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)

    * libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.3 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - libvpx: Denial of service in mediaserver (CVE-2017-0393)

  - libvpx: Out of bounds read in vp8_norm table     (CVE-2019-9232)

  - libvpx: Use-after-free in vp8_deblock() in     vp8/common/postproc.c (CVE-2019-9433)

  - libvpx: Out of bounds read in vp8_decode_frame in     decodeframe.c (CVE-2020-0034)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory.

  - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a     specially crafted file to cause a device hang or reboot. This issue is rated as High due to the     possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,     7.1. Android ID: A-30436808. (CVE-2017-0393)

  - In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote     information disclosure with no additional execution privileges needed. User interaction is not needed for     exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483 (CVE-2019-9232)

  - In libvpx, there is a possible information disclosure due to improper input validation. This could lead to     remote information disclosure with no additional execution privileges needed. User interaction is needed     for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354 (CVE-2019-9433)

  - In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input     validation. This could lead to remote information disclosure if error correction were turned on, with no     additional execution privileges needed. User interaction is not needed for exploitation.Product:
    AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770 (CVE-2020-0034)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-3876 advisory.

    - Fix for CVE-2020-0034
    - Fix for CVE-2019-9232 and CVE-2019-9433
    - Fix for CVE-2017-0393
    - apply patch from upstream git (Change I6266aba7), should resolve CVE-2010-4203

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory.

    The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec,     commonly used with the WebM multimedia container file format.

    Security Fix(es):

    * libvpx: Denial of service in mediaserver (CVE-2017-0393)

    * libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

    * libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

    * libvpx: Out of bounds read in vp8_decode_frame in decodeframe.c (CVE-2020-0034)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.9 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-202003-59 (libvpx: User-assisted execution of arbitrary code)

    Multiple vulnerabilities have been discovered in libvpx. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file, possibly resulting in the execution of arbitrary code with the       privileges of the user running the application, or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

This update for libvpx fixes the following issues :

CVE-2019-9232: Fixed an out of bound memory access (bsc#1160613).

CVE-2019-9433: Fixdd a use-after-free in vp8_deblock() (bsc#1160614).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libvpx fixes the following issues :

  - CVE-2019-2126: Fixed a double free in     ParseContentEncodingEntry() (bsc#1160611).

  - CVE-2019-9325: Fixed an out-of-bounds read     (bsc#1160612).

  - CVE-2019-9232: Fixed an out-of-bounds memory access on     fuzzed data (bsc#1160613).

  - CVE-2019-9433: Fixed a use-after-free in vp8_deblock()     (bsc#1160614).

  - CVE-2019-9371: Fixed a resource exhaustion after memory     leak (bsc#1160615).

This update was imported from the SUSE:SLE-15:Update update project.

Update to 1.8.2. Fixes several security vulnerabilities:
CVE-2019-9232, CVE 2019-9433, CVE-2019-9325, CVE-2019-9371, CVE-2019-2126

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for libvpx fixes the following issues :

CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).

CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).

CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).

CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).

CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 1.8.2

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues were found in libvpx multimedia library which could result in denial of service and potentially the execution of arbitrary code if malformed WebM files are processed.

Several issues have been found in libvpx, a VP8 and VP9 video codec.

CVE-2019-9232

There is a possible out of bounds read due to a missing bounds check.
This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2019-9433

There is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

For Debian 8 'Jessie', these problems have been fixed in version 1.3.0-3+deb8u2.

We recommend that you upgrade your libvpx packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4199-1 advisory.

    It was discovered that libvpx did not properly handle certain malformed WebM media files. If an     application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of     service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
196227	RHEL 6 : libvpx (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
184953	Rocky Linux 8 : libvpx (RLSA-2020:4629)	Nessus	Rocky Linux Local Security Checks	high
157620	AlmaLinux 8 : libvpx (ALSA-2020:4629)	Nessus	Alma Linux Local Security Checks	high
154441	NewStart CGSL CORE 5.05 / MAIN 5.05 : libvpx Multiple Vulnerabilities (NS-SA-2021-0147)	Nessus	NewStart CGSL Local Security Checks	high
149125	EulerOS 2.0 SP3 : libvpx (EulerOS-SA-2021-1814)	Nessus	Huawei Local Security Checks	medium
147382	NewStart CGSL MAIN 6.02 : libvpx Multiple Vulnerabilities (NS-SA-2021-0060)	Nessus	NewStart CGSL Local Security Checks	high
147310	NewStart CGSL CORE 5.04 / MAIN 5.04 : libvpx Multiple Vulnerabilities (NS-SA-2021-0015)	Nessus	NewStart CGSL Local Security Checks	high
146743	EulerOS 2.0 SP2 : libvpx (EulerOS-SA-2021-1322)	Nessus	Huawei Local Security Checks	medium
146031	CentOS 8 : libvpx (CESA-2020:4629)	Nessus	CentOS Local Security Checks	high
144253	EulerOS 2.0 SP5 : libvpx (EulerOS-SA-2020-2553)	Nessus	Huawei Local Security Checks	medium
142773	Oracle Linux 8 : libvpx (ELSA-2020-4629)	Nessus	Oracle Linux Local Security Checks	high
142738	Amazon Linux 2 : libvpx (ALAS-2020-1558)	Nessus	Amazon Linux Local Security Checks	high
142413	RHEL 8 : libvpx (RHSA-2020:4629)	Nessus	Red Hat Local Security Checks	high
141685	Scientific Linux Security Update : libvpx on SL7.x x86_64 (20201001)	Nessus	Scientific Linux Local Security Checks	high
141617	CentOS 7 : libvpx (RHSA-2020:3876)	Nessus	CentOS Local Security Checks	high
141257	Oracle Linux 7 : libvpx (ELSA-2020-3876)	Nessus	Oracle Linux Local Security Checks	high
141041	RHEL 7 : libvpx (RHSA-2020:3876)	Nessus	Red Hat Local Security Checks	high
134967	GLSA-202003-59 : libvpx: User-assisted execution of arbitrary code	Nessus	Gentoo Local Security Checks	high
134079	SUSE SLES12 Security Update : libvpx (SUSE-SU-2020:0459-1)	Nessus	SuSE Local Security Checks	high
133253	openSUSE Security Update : libvpx (openSUSE-2020-105)	Nessus	SuSE Local Security Checks	high
133236	Fedora 30 : libvpx (2020-6cd410d9e4)	Nessus	Fedora Local Security Checks	high
133141	SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2020:0143-1)	Nessus	SuSE Local Security Checks	high
132789	Fedora 31 : libvpx (2020-65eac1b48b)	Nessus	Fedora Local Security Checks	high
131439	Debian DSA-4578-1 : libvpx - security update	Nessus	Debian Local Security Checks	high
131331	Debian DLA-2012-1 : libvpx security update	Nessus	Debian Local Security Checks	high
131314	Ubuntu 16.04 LTS / 18.04 LTS : libvpx vulnerabilities (USN-4199-1)	Nessus	Ubuntu Local Security Checks	high

Detections

Analytics

CVE-2019-9433

medium

Tenable Plugins

high

high

high

high

medium

high

high

medium

high

medium

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high

high