Summary
It was discovered that libde265 could be made to allocate memory that
exceeds the maximum supported size. If a user or automated system were
tricked into opening a specially crafted file, an attacker could possibly
use this issue to cause a denial of service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libde265 | 1.0.2-2ubuntu0.16.04.1~esm5 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libde265 | 1.0.2-2ubuntu0.18.04.1~esm5 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libde265 | 1.0.4-1ubuntu0.4+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | libde265 | 1.0.8-1ubuntu0.3+esm1 |
Vulnerabilities 1
-
Low 3.3
Buffer Overflow vulnerability in libde265 v1.0.12 allows a local attacker to cause a denial of service via the allocati…
References
-
report
https://ubuntu.com/security/CVE-2023-51792