Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Mageia 8 & 9: MGASA-2023-0280 Moderate: libvpx Heap Corruption Exploit

mageia
Calendar Grey October 2, 2023
Dist Mageia Esm H88
Heap corruption in libvpx might be exploited through a specially designed HTML document. See advisory MGASA-2023-0280 for details.
Heap buffer overflow in vp8 encoding in libvpx allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

Summary

Heap buffer overflow in vp8 encoding in libvpx allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

- https://bugs.mageia.org/show_bug.cgi?id=32342

- https://www.cve.org/CVERecord?id=CVE-2023-5217

- https://www.openwall.com/lists/oss-security/2023/09/28/5

- https://www.cve.org/CVERecord?id=CVE-2023-5217

Topics%20covered

Topics Covered

security advisory moderate heap corruption exploit libvpx Mageia

Resolution

SRPMS

- 8/core/libvpx-1.9.0-1.1.mga8

- 9/core/libvpx-1.12.0-1.1.mga9

Publication date: 02 Oct 2023
URL: https://advisories.mageia.org/MGASA-2023-0280.html
Type: security
CVE: CVE-2023-5217

Topics%20covered

Topics Covered

security advisory moderate heap corruption exploit libvpx Mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here