USN-6677-1

Dashboard / Vulnerabilities / USN-6677-1

USN-6677-1

Summary: libde265 vulnerabilities

Details: It was discovered that libde265 could be made to dereference invalid memory. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-27102) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-27103) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-43887, CVE-2023-47471, CVE-2023-49465, CVE-2023-49467, CVE-2023-49468)

References: https://ubuntu.com/security/notices/USN-6677-1, https://ubuntu.com/security/CVE-2023-27102, https://ubuntu.com/security/CVE-2023-27103, https://ubuntu.com/security/CVE-2023-43887, https://ubuntu.com/security/CVE-2023-47471, https://ubuntu.com/security/CVE-2023-49465, https://ubuntu.com/security/CVE-2023-49467, https://ubuntu.com/security/CVE-2023-49468