High WID-SEC-2023-1123 8 CVEs

Red Hat Enterprise Linux (libwebp): Mehrere Schwachstellen

Published Nov 9, 2021 · Updated May 23, 2023 · Revision 4 · de-DE

Vendor: amazon Vendor: Red Hat Product: Enterprise Linux Product: Linux 2 Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux libwebp ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 8

Unscored —

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2018-25012

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2018-25013

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2018-25014

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2020-36330

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign.…

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2020-36331

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The …

libwebp libwebp Debian Ubuntu

May 21, 2021
Unscored —

CVE-2020-36332

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memo…

libwebp libwebp Debian Ubuntu

May 21, 2021

Revision history

2023-05-23 #4
Neue Updates von Amazon aufgenommen
2023-05-16 #3
Neue Updates von Amazon aufgenommen
2023-05-02 #2
Neue Updates von Amazon aufgenommen
2021-11-09 #1
Initiale Fassung

References

Amazon Linux Security Advisory ALAS-2023-1748 vom 2023-05-24
https://alas.aws.amazon.com/ALAS-2023-1748.html
Amazon Linux Security Advisory ALAS-2023-2048 vom 2023-05-17
https://alas.aws.amazon.com/AL2/ALAS-2023-2048.html
Amazon Linux Security Advisory ALAS-2023-2031 vom 2023-05-03
https://alas.aws.amazon.com/AL2/ALAS-2023-2031.html
RedHat Security Advisory vom 2021-11-09
https://access.redhat.com/errata/RHSA-2021:4231