Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3881 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3881-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 07, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : aom     Version        : 1.0.0.errata1-3+deb11u2     CVE ID         : CVE-2024-5171

    Integer overflows have been fixed in aom, an AV1 Codec Library.

    For Debian 11 bullseye, this problem has been fixed in version     1.0.0.errata1-3+deb11u2.

    We recommend that you upgrade your aom packages.

    For the detailed security status of aom please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/aom

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5753 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5753-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     August 21, 2024                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : aom     CVE ID         : CVE-2024-5171

    An integer overflow was discovered in aom, the AV1 Video Codec Library,     which could potentially result in the execution of arbitrary code if a     malformed media file is processed.

    For the stable distribution (bookworm), this problem has been fixed in     version 3.6.0-1+deb12u1.

    We recommend that you upgrade your aom packages.

    For the detailed security status of aom please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/aom

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2b54d5a9d advisory.

    update to 126.0.6478.114

    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-dd14eefb0e advisory.

    update to 126.0.6478.114

    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2056-1 advisory.

    - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow     (bsc#1226020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2030-1 advisory.

    - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow     (bsc#1226020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6815-1 advisory.

    Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application     using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly     execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206764	Debian dla-3881 : aom-tools - security update	Nessus	Debian Local Security Checks	critical
206010	Debian dsa-5753 : aom-tools - security update	Nessus	Debian Local Security Checks	critical
200825	Fedora 40 : chromium (2024-d2b54d5a9d)	Nessus	Fedora Local Security Checks	critical
200797	Fedora 39 : chromium (2024-dd14eefb0e)	Nessus	Fedora Local Security Checks	critical
200710	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libaom (SUSE-SU-2024:2056-1)	Nessus	SuSE Local Security Checks	critical
200636	SUSE SLES15 Security Update : libaom (SUSE-SU-2024:2030-1)	Nessus	SuSE Local Security Checks	critical
200176	Ubuntu 24.04 LTS : AOM vulnerability (USN-6815-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2024-5171

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical