1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-6403-1

[USN-6403-1] libvpx vulnerabilities

Severity High
Affected Packages 12
CVEs 2
Info Packages Vulnerabilities

Several security issues were fixed in libvpx.

It was discovered that libvpx did not properly handle certain malformed
media files. If an application using libvpx opened a specially crafted
file, a remote attacker could cause a denial of service, or possibly
execute arbitrary code.

Package Affected Version
pkg:deb/ubuntu/vpx-tools?distro=lunar < 1.12.0-1ubuntu1.2
pkg:deb/ubuntu/vpx-tools?distro=jammy < 1.11.0-2ubuntu2.2
pkg:deb/ubuntu/vpx-tools?distro=focal < 1.8.2-1ubuntu0.2
pkg:deb/ubuntu/libvpx7?distro=lunar < 1.12.0-1ubuntu1.2
pkg:deb/ubuntu/libvpx7?distro=jammy < 1.11.0-2ubuntu2.2
pkg:deb/ubuntu/libvpx6?distro=focal < 1.8.2-1ubuntu0.2
pkg:deb/ubuntu/libvpx-doc?distro=lunar < 1.12.0-1ubuntu1.2
pkg:deb/ubuntu/libvpx-doc?distro=jammy < 1.11.0-2ubuntu2.2
pkg:deb/ubuntu/libvpx-doc?distro=focal < 1.8.2-1ubuntu0.2
pkg:deb/ubuntu/libvpx-dev?distro=lunar < 1.12.0-1ubuntu1.2
pkg:deb/ubuntu/libvpx-dev?distro=jammy < 1.11.0-2ubuntu2.2
pkg:deb/ubuntu/libvpx-dev?distro=focal < 1.8.2-1ubuntu0.2
ID
USN-6403-1
Severity
high
Severity from
CVE-2023-5217
URL
https://ubuntu.com/security/notices/USN-6403-1
Published
2023-10-02T16:47:37
(11 months ago)
Modified
2023-10-02T16:47:37
(11 months ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/vpx-tools?distro=lunar ubuntu vpx-tools < 1.12.0-1ubuntu1.2 lunar
Affected pkg:deb/ubuntu/vpx-tools?distro=jammy ubuntu vpx-tools < 1.11.0-2ubuntu2.2 jammy
Affected pkg:deb/ubuntu/vpx-tools?distro=focal ubuntu vpx-tools < 1.8.2-1ubuntu0.2 focal
Affected pkg:deb/ubuntu/libvpx7?distro=lunar ubuntu libvpx7 < 1.12.0-1ubuntu1.2 lunar
Affected pkg:deb/ubuntu/libvpx7?distro=jammy ubuntu libvpx7 < 1.11.0-2ubuntu2.2 jammy
Affected pkg:deb/ubuntu/libvpx6?distro=focal ubuntu libvpx6 < 1.8.2-1ubuntu0.2 focal
Affected pkg:deb/ubuntu/libvpx-doc?distro=lunar ubuntu libvpx-doc < 1.12.0-1ubuntu1.2 lunar
Affected pkg:deb/ubuntu/libvpx-doc?distro=jammy ubuntu libvpx-doc < 1.11.0-2ubuntu2.2 jammy
Affected pkg:deb/ubuntu/libvpx-doc?distro=focal ubuntu libvpx-doc < 1.8.2-1ubuntu0.2 focal
Affected pkg:deb/ubuntu/libvpx-dev?distro=lunar ubuntu libvpx-dev < 1.12.0-1ubuntu1.2 lunar
Affected pkg:deb/ubuntu/libvpx-dev?distro=jammy ubuntu libvpx-dev < 1.11.0-2ubuntu2.2 jammy
Affected pkg:deb/ubuntu/libvpx-dev?distro=focal ubuntu libvpx-dev < 1.8.2-1ubuntu0.2 focal
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date