Summary
It was discovered that libEBML incorrectly handled certain read and write
operations. An attacker could possibly use this issue to cause a buffer
overflow, resulting in a denial of service.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libebml | 1.3.3-1ubuntu0.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libebml | 1.3.5-2ubuntu0.1+esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libebml | 1.3.10-1ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | libebml | 1.4.2-2ubuntu0.1~esm1 |
Vulnerabilities 1
-
Medium 6.5
In libebml before 1.4.5, an integer overflow in MemIOCallback.cpp can occur when reading or writing. It may result in b…
References
-
report
https://ubuntu.com/security/CVE-2023-52339