Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 30 articles for you...
197
security advisorydenial of servicebuffer overflowDebian Jessie: DLA-2021-1 Moderate: Libav DoS and Buffer Overflow Fixes
Several security issues were fixed in libav, a multimedia library for processing audio and video files. . Package : libav Version : 6:11.12-1~deb8u9 CVE ID : CVE-2017-17127 CVE-2017-18245 CVE-2018-19128 CVE-2018-19130 CVE-2019-14443 CVE-2019-17542 Several security issues were fixed in libav, a multimedia library for processing audio and video files. CVE-2017-17127 The vc1_decode_frame function in libavcodec/vc1dec.c allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. CVE-2018-19130 is a duplicate of this vulnerability. CVE-2017-18245 The mpc8_probe function in libavformat/mpc8.c allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted audio file on 32-bit systems. CVE-2018-19128 Heap-based buffer over-read in decode_frame in libavcodec/lcldec.c allows an attacker to cause denial-of-service via a crafted avi file. CVE-2019-14443 Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote attackers to cause a denial of service (application crash), as demonstrated by avconv. CVE-2019-17542 Heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_init in libavcodec/vqavideo.c. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u9. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Tackling vulnerabilities in libav to avert system halts and buffer overruns. Update libraries for improved protection.. libav security, multimedia library, audio video processing. . LinuxSecurity.com Team
Dec 05, 2019
Debian LTS
197
security advisorydenial of servicebuffer overflowDebian LTS: DLA-1907-1 Moderate: Libav Security Threats and Fixes
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. . Package : libav Version : 6:11.12-1~deb8u8 CVE ID : CVE-2017-9987 CVE-2018-5766 CVE-2018-11102 CVE-2019-14372 CVE-2019-14442 Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2017-9987 In Libav, there was a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c. A crafted input could have lead to a remote denial of service attack. CVE-2018-5766 In Libav there was an invalid memcpy in the av_packet_ref function of libavcodec/avpacket.c. Remote attackers could have leveraged this vulnerability to cause a denial of service (segmentation fault) via a crafted avi file. CVE-2018-11102 A read access violation in the mov_probe function in libavformat/mov.c allowed remote attackers to cause a denial of service (application crash), as demonstrated by avconv. CVE-2019-14372 In Libav, there was an infinite loop in the function wv_read_block_header() in the file wvdec.c. CVE-2019-14442 In mpc8_read_header in libavformat/mpc8.c, an input file could have resulted in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could have leveraged this vulnerability to cause a denial of service via a crafted file. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u8. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
Sep 02, 2019
Debian LTS
197
security advisorydenial of servicesoftware updateDebian LTS DLA-1809-1 Moderate: libav Denial of Service Fix
Two more security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. . Package : libav Version : 6:11.12-1~deb8u7 CVE ID : CVE-2018-15822 CVE-2019-11338 Two more security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2018-15822 The flv_write_packet function in libavformat/flvenc.c in libav did not check for an empty audio packet, leading to an assertion failure. CVE-2019-11338 libavcodec/hevcdec.c in libav mishandled detection of duplicate first slices, which allowed remote attackers to cause a denial of service (NULL pointer dereference and out-of-array access) or possibly have unspecified other impact via crafted HEVC data. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u7. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
May 29, 2019
•Important
Debian LTS
197
security advisorydenial of servicedebianDebian 9: DLA-1850-1 Moderate: libav Security Vulnerabilities Found
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. . Package : libav Version : 6:11.12-1~deb8u6 CVE ID : CVE-2015-1872 CVE-2017-14058 CVE-2017-1000460 CVE-2018-6392 CVE-2018-1999012 Debian Bug : Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2015-1872 The ff_mjpeg_decode_sof function in libavcodec/mjpegdec.c did not validate the number of components in a JPEG-LS Start Of Frame segment, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Motion JPEG data. CVE-2017-14058 The read_data function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to cause a denial of service (infinite loop). CVE-2017-1000460 In get_last_needed_nal() (libavformat/h264.c) the return value of init_get_bits was ignored and get_ue_golomb(&gb) was called on an uninitialized get_bits context, which caused a NULL deref exception. CVE-2018-6392 The filter_slice function in libavfilter/vf_transpose.c allowed remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file. CVE-2018-1999012 libav contained a CWE-835: Infinite loop vulnerability in pva format demuxer that could result in a vulnerability that allowed attackers to consume excessive amount of resources like CPU and RAM. This attack appeared to be exploitable via specially crafted PVA file had to be provided as input. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u6. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at:https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
Mar 30, 2019
Debian LTS
197
security advisorydenial of servicecode executionDebian 8 LTS DLA-1630-1 Critical: Libav Denial of Service Risks
Several security vulnerabilities were corrected in the libav multimedia library which may lead to a denial-of-service, information disclosure or the execution of arbitrary code if a malformed file is processed. . Package : libav Version : 6:11.12-1~deb8u4 CVE ID : CVE-2017-9993 CVE-2017-9994 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14170 CVE-2017-14171 CVE-2017-14767 CVE-2017-15672 CVE-2017-17130 CVE-2018-6621 CVE-2018-7557 CVE-2018-14394 CVE-2018-1999010 Several security vulnerabilities were corrected in the libav multimedia library which may lead to a denial-of-service, information disclosure or the execution of arbitrary code if a malformed file is processed. CVE-2017-9993 Libav does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data. CVE-2017-9994 libavcodec/webp.c in Libav does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. CVE-2017-14055 Denial-of-service in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. CVE-2017-14056 Denial-of-service in rl2_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. CVE-2017-14057 Denial-of-service in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. CVE-2017-14170 Denial-of-service in mxf_read_index_entry_array() due to lack of an EOF (End of File) check might cause huge CPU consumption. CVE-2017-14171 Denial-of-service in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might causehuge CPU consumption. CVE-2017-14767 The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c mishandles empty sprop-parameter-sets values, which allows remote attackers to cause a denial of service (heap buffer overflow) or possibly have unspecified other impact via a crafted sdp file. CVE-2017-15672 The read_header function in libavcodec/ffv1dec.c allows remote attackers to have unspecified impact via a crafted MP4 file, which triggers an out-of-bounds read. CVE-2017-17130 The ff_free_picture_tables function in libavcodec/mpegpicture.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file, related to vc1_decode_i_blocks_adv. CVE-2018-6621 The decode_frame function in libavcodec/utvideodec.c in Libav allows remote attackers to cause a denial of service (out of array read) via a crafted AVI file. CVE-2018-7557 The decode_init function in libavcodec/utvideodec.c in Libav allows remote attackers to cause a denial of service (Out of array read) via an AVI file with crafted dimensions within chroma subsampling data. CVE-2018-14394 libavformat/movenc.c in Libav allows attackers to cause a denial of service (application crash caused by a divide-by-zero error) with a user crafted Waveform audio file. CVE-2018-1999010 Libav contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u4. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Enhance the libav multimedia package in order to address security flaws leading to DoS and data leaks for users of Debian8.. libav security update, multimedia vulnerabilities, Debian LTS advisory, libav denial of service. . Severity: Critical. LinuxSecurity.com Team
Jan 07, 2019
•Critical
Debian LTS
197
security advisorydenial of serviceupdateDebian 8: DLA-1611-2 Moderate: libav Remote DoS Issues Fixed
Two more security issues have been corrected in the libav multimedia library. This is a follow-up announcement for DLA-1611-1. CVE-2015-6823 . Package : libav Version : 6:11.12-1~deb8u3 CVE ID : CVE-2015-6822 CVE-2015-6823 CVE-2015-6824 Two more security issues have been corrected in the libav multimedia library. This is a follow-up announcement for DLA-1611-1. CVE-2015-6823 The allocate_buffers function in libavcodec/alac.c did not initialize certain context data, which allowed remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted Apple Lossless Audio Codec (ALAC) data. This issues has now been addressed by clearing pointers in avcodec/alac.c's allocate_buffers(). Other than stated in debian/changelog of upload 6:11.12-1~deb8u2, this issue only now got fixed with upload of 6:11.12-1~deb8u3. CVE-2015-6824 The sws_init_context function in libswscale/utils.c did not initialize certain pixbuf data structures, which allowed remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted video data. In swscale/utils.c now these pix buffers get cleared which fixes use of uninitialized memory. Other than stated in debian/changelog of upload 6:11.12-1~deb8u2, this issue only now got fixed with upload of 6:11.12-1~deb8u3. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u3. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
Dec 21, 2018
Debian LTS
197
security advisorydenial of servicebuffer overflowDebian 8: DLA-1611-1 Critical: libav Denial Of Service Issues
Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. . Package : libav Version : 6:11.12-1~deb8u2 CVE ID : CVE-2014-9317 CVE-2015-6761 CVE-2015-6818 CVE-2015-6820 CVE-2015-6821 CVE-2015-6822 CVE-2015-6825 CVE-2015-6826 CVE-2015-8216 CVE-2015-8217 CVE-2015-8363 CVE-2015-8364 CVE-2015-8661 CVE-2015-8662 CVE-2015-8663 CVE-2016-10190 CVE-2016-10191 Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-9317 The decode_ihdr_chunk function in libavcodec/pngdec.c allowed remote attackers to cause a denial of service (out-of-bounds heap access) and possibly had other unspecified impact via an IDAT before an IHDR in a PNG file. The issue got addressed by checking IHDR/IDAT order. CVE-2015-6761 The update_dimensions function in libavcodec/vp8.c in libav relies on a coefficient-partition count during multi-threaded operation, which allowed remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file. This issue has been resolved by using num_coeff_partitions in thread/buffer setup. The variable is not a constant and can lead to race conditions. CVE-2015-6818 The decode_ihdr_chunk function in libavcodec/pngdec.c did not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted image with two or more of these chunks. This has now been fixed by only allowing one IHDR chunk. Multiple IHDR chunks are forbidden in PNG. CVE-2015-6820 The ff_sbr_apply function in libavcodec/aacsbr.c did not check for a matching AAC frame syntax element beforeproceeding with Spectral Band Replication calculations, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted AAC data. This has now been fixed by checking that the element type matches before applying SBR. CVE-2015-6821 The ff_mpv_common_init function in libavcodec/mpegvideo.c did not properly maintain the encoding context, which allowed remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted MPEG data. The issue has been resolved by clearing pointers in ff_mpv_common_init(). This ensures that no stale pointers leak through on any path. CVE-2015-6822 The destroy_buffers function in libavcodec/sanm.c did not properly maintain height and width values in the video context, which allowed remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via crafted LucasArts Smush video data. The solution to this was to reset sizes in destroy_buffers() in avcodec/sanm.c. CVE-2015-6823 Other than stated in the debian/changelog file, this issue has not yet been fixed for libav in Debian jessie LTS. CVE-2015-6824 Other than stated in the debian/changelog file, this issue has not yet been fixed for libav in Debian jessie LTS. CVE-2015-6825 The ff_frame_thread_init function in libavcodec/pthread_frame.c mishandled certain memory-allocation failures, which allowed remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via a crafted file, as demonstrated by an AVI file. Clearing priv_data in avcodec/pthread_frame.c has resolved this and now avoids stale pointer in error case. CVE-2015-6826 The ff_rv34_decode_init_thread_copy function in libavcodec/rv34.c did notinitialize certain structure members, which allowed remote attackers to cause a denial of service (invalid pointer access) or possibly have unspecified other impact via crafted (1) RV30 or (2) RV40 RealVideo data. This issue got addressed by clearing pointers in ff_rv34_decode_init_thread_copy() in avcodec/rv34.c, which avoids leaving stale pointers. CVE-2015-8216 The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg omitted certain width and height checks, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted MJPEG data. The issues have been fixed by adding a check for index to avcodec/mjpegdec.c in ljpeg_decode_yuv_scan() before using it, which fixes an out of array access. CVE-2015-8217 The ff_hevc_parse_sps function in libavcodec/hevc_ps.c did not validate the Chroma Format Indicator, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted High Efficiency Video Coding (HEVC) data. A check of chroma_format_idc in avcodec/hevc_ps.c has now been added to fix this out of array access. CVE-2015-8363 The jpeg2000_read_main_headers function in libavcodec/jpeg2000dec.c did not enforce uniqueness of the SIZ marker in a JPEG 2000 image, which allowed remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via a crafted image with two or more of these markers. In avcodec/jpeg2000dec.c a check for duplicate SIZ marker has been added to fix this. CVE-2015-8364 Integer overflow in the ff_ivi_init_planes function in libavcodec/ivi.c allowed remote attackers to cause a denial of service (out-of-bounds heap-memory access) or possibly have unspecified other impact via crafted image dimensions in Indeo Video Interactive data. A check of image dimensions has been added to the code (in avcodec/ivi.c) that fixes this integer overflow now. CVE-2015-8661 The h264_slice_header_init function in libavcodec/h264_slice.c did not validate the relationship between the number of threads and the number of slices, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data. In avcodec/h264_slice.c now max_contexts gets limited when slice_context_count is initialized. This avoids an out of array access. CVE-2015-8662 The ff_dwt_decode function in libavcodec/jpeg2000dwt.c did not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data. In avcodec/jpeg2000dwt.c a check of ndeclevels has been added before calling dwt_decode*(). This fixes an out of array access. CVE-2015-8663 The ff_get_buffer function in libavcodec/utils.c preserved width and height values after a failure, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file. Now, dimensions get cleared in ff_get_buffer() on failure, which fixes the cause for an out of array access. CVE-2016-10190 A heap-based buffer overflow in libavformat/http.c allowed remote web servers to execute arbitrary code via a negative chunk size in an HTTP response. In libavformat/http.c the length/offset-related variables have been made unsigned. This fix required inclusion of two other changes ported from ffmpeg upstream Git (commits 3668701f and 362c17e6). CVE-2016-10191 Another heap-based buffer overflow in libavformat/rtmppkt.c allowed remote attackers to execute arbitrary code by leveraging failure to check for RTMP packet size mismatches. By checking for packet size mismatched, this out of array access has been resolved. For Debian 8 "Jessie", these problems have been fixed in version 6:11.12-1~deb8u2. We recommend that you upgrade your libav packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
Dec 20, 2018
•Critical
Debian LTS
91
security advisorydenial of servicegentooGentoo: GLSA-201811-19 Normal: Libav Denial of Service Condition
Multiple vulnerabilities have been found in Libav, the worst of which may allow a Denial of Service condition.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201811-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Libav: Multiple vulnerabilities Date: November 27, 2018 Bugs: #637458 ID: 201811-19 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======= Multiple vulnerabilities have been found in Libav, the worst of which may allow a Denial of Service condition. Background ========= Libav is a complete solution to record, convert and stream audio and video. Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 media-video/libav < 12.3 > = 12.3 Description ========== Multiple vulnerabilities have been discovered in Libav. Please review the CVE identifiers referenced below for details. Impact ===== A remote attacker, via a crafted Smacker stream, could cause a Denial of Service condition. Workaround ========= There is no known workaround at this time. Resolution ========= All Libav users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =media-video/libav-12.3" References ========= [ 1 ] CVE-2017-16803 https://nvd.nist.gov/vuln/detail/CVE-2017-16803 [ 2 ] CVE-2017-7862 https://nvd.nist.gov/vuln/detail/CVE-2017-7862 Availability =========== This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/201811-19 Concerns? ======== Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Nov 27, 2018
Gentoo
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!