VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash, related to dav1d_decode_frame_exit.

The remote host is affected by the vulnerability described in GLSA-202310-05 (dav1d: Denial of Service)

  - VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash,     related to dav1d_decode_frame_exit. (CVE-2023-32570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-652b6e8847 advisory.

    Update to version 1.2.1.

    This version includes a fix for CVE-2023-32570 (race condition that can lead to an application crash).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2618-1 advisory.

  - VideoLAN dav1d before 1.2.0 has a thread_task.c race condition that can lead to an application crash,     related to dav1d_decode_frame_exit. (CVE-2023-32570)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-9ea5d6e289 advisory.

    Update to version 1.2.1.

    This version includes a fix for CVE-2023-32570 (race condition that can lead to an application crash).

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
182751	GLSA-202310-05 : dav1d: Denial of Service	Nessus	Gentoo Local Security Checks	medium
178038	Fedora 37 : dav1d (2023-652b6e8847)	Nessus	Fedora Local Security Checks	medium
177611	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : dav1d (SUSE-SU-2023:2618-1)	Nessus	SuSE Local Security Checks	medium
177589	Fedora 38 : dav1d (2023-9ea5d6e289)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2023-32570

medium

Tenable Plugins

medium

medium

medium

medium