A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5941 advisory.

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)

    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5941 advisory.

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5941 advisory.

    [1.7.0-11]
    - Add patch to fix integer overflows.
    - Fix compilation by including limits.h
    - Resolves: RHEL-40650

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5941 advisory.

    The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec,     commonly used with the WebM multimedia container file format.

    Security Fix(es):

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)

    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 115.12.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2617 advisory.

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of firefox installed on the remote host is prior to 115.13.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-027 advisory.

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

    By monitoring the time certain operations take, an attacker could have guessed which external protocol     handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR <     115.12, and Thunderbird < 115.12. (CVE-2024-5690)

    By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading     to a potentially exploitable crash. This vulnerability affects Firefox < 127 and Firefox ESR < 115.12.
    (CVE-2024-5696)

    A race condition could lead to a cross-origin container obtaining permissions of the top-level origin.
    This vulnerability affects Firefox < 128 and Firefox ESR < 115.13. (CVE-2024-6601)

    A mismatch between allocator and deallocator could have lead to memory corruption. This vulnerability     affects Firefox < 128 and Firefox ESR < 115.13. (CVE-2024-6602)

    In an out-of-memory scenario an allocation could fail but free would have been called on the pointer     afterwards leading to memory corruption. This vulnerability affects Firefox < 128 and Firefox ESR <     115.13. (CVE-2024-6603)

    Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Firefox ESR < 115.13.
    (CVE-2024-6604)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-47dbf2a4de advisory.

    Security fix for CVE-2023-6349 & FTBFS fixes


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2409-1 advisory.

    - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large     parameters (bsc#1225879).
    - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally     configured size (bsc#1225403).
    - CVE-2023-44488: Fixed heap buffer overflow in vp8 encoding (bsc#1216879).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2408-1 advisory.

    - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large     parameters (bsc#1225879).
    - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally     configured size (bsc#1225403).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
207310	Rocky Linux 8 : libvpx (RLSA-2024:5941)	Nessus	Rocky Linux Local Security Checks	medium
206323	AlmaLinux 8 : libvpx (ALSA-2024:5941)	Nessus	Alma Linux Local Security Checks	medium
206313	Oracle Linux 8 : libvpx (ELSA-2024-5941)	Nessus	Oracle Linux Local Security Checks	medium
206278	RHEL 8 : libvpx (RHSA-2024:5941)	Nessus	Red Hat Local Security Checks	medium
205729	Amazon Linux 2 : thunderbird (ALAS-2024-2617)	Nessus	Amazon Linux Local Security Checks	medium
205700	Amazon Linux 2 : firefox (ALASFIREFOX-2024-027)	Nessus	Amazon Linux Local Security Checks	medium
204935	Fedora 40 : obs-cef (2024-47dbf2a4de)	Nessus	Fedora Local Security Checks	high
202250	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2024:2409-1)	Nessus	SuSE Local Security Checks	high
202248	SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2024:2408-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2023-6349

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

high

high

high