USN-6627-1

Dashboard / Vulnerabilities / USN-6627-1

USN-6627-1

Summary: libde265 vulnerabilities

Details: It was discovered that libde265 could be made to read out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2021-35452, CVE-2021-36411, CVE-2022-43238, CVE-2022-43241, CVE-2022-43242) It was discovered that libde265 did not properly manage memory. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-36408) It was discovered that libde265 contained a logical error. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. (CVE-2021-36409) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-36410, CVE-2022-43235, CVE-2022-43236, CVE-2022-43237, CVE-2022-43239, CVE-2022-43240, CVE-2022-43243, CVE-2022-43248, CVE-2022-43252, CVE-2022-43253) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1253)

References: https://ubuntu.com/security/notices/USN-6627-1, https://ubuntu.com/security/CVE-2021-35452, https://ubuntu.com/security/CVE-2021-36408, https://ubuntu.com/security/CVE-2021-36409, https://ubuntu.com/security/CVE-2021-36410, https://ubuntu.com/security/CVE-2021-36411, https://ubuntu.com/security/CVE-2022-1253, https://ubuntu.com/security/CVE-2022-43235, https://ubuntu.com/security/CVE-2022-43236, https://ubuntu.com/security/CVE-2022-43237, https://ubuntu.com/security/CVE-2022-43238, https://ubuntu.com/security/CVE-2022-43239, https://ubuntu.com/security/CVE-2022-43240, https://ubuntu.com/security/CVE-2022-43241, https://ubuntu.com/security/CVE-2022-43242, https://ubuntu.com/security/CVE-2022-43243, https://ubuntu.com/security/CVE-2022-43248, https://ubuntu.com/security/CVE-2022-43252, https://ubuntu.com/security/CVE-2022-43253