libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and process_text) because the wrong integer data type is used for subtraction.

The remote host is affected by the vulnerability described in GLSA-202208-13 (libass: Denial of service)

  - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and     process_text) because the wrong integer data type is used for subtraction. (CVE-2020-36430)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1174-1 advisory.

  - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and     process_text) because the wrong integer data type is used for subtraction. (CVE-2020-36430)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2792-1 advisory.

  - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and     process_text) because the wrong integer data type is used for subtraction. (CVE-2020-36430)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2792-1 advisory.

  - libass 0.15.x before 0.15.1 has a heap-based buffer overflow in decode_chars (called from decode_font and     process_text) because the wrong integer data type is used for subtraction. (CVE-2020-36430)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
163983	GLSA-202208-13 : libass: Denial of service	Nessus	Gentoo Local Security Checks	high
152722	openSUSE 15 Security Update : libass (openSUSE-SU-2021:1174-1)	Nessus	SuSE Local Security Checks	high
152720	openSUSE 15 Security Update : libass (openSUSE-SU-2021:2792-1)	Nessus	SuSE Local Security Checks	high
152718	SUSE SLED15 / SLES15 Security Update : libass (SUSE-SU-2021:2792-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-36430

high

Tenable Plugins

high

high

high

high