Startseite ▼ Bookkeeping
Online ▼ Sicherheits
Überprüfungs ▼
Verwaltetes
DNS ▼
Info
Bestellen/Erneuern
FAQ
AUP
Dynamic DNS Clients
Domaine konfigurieren Dyanmic DNS Update Password Netzwerk
Überwachung ▼
Enterprise
Erweiterte
Standard
Gratis Test
FAQ
Preis/Funktionszusammenfassung
Bestellen
Beispiele
Konfigurieren/Status Alarm Profile | |||
Test Kennung: | 1.3.6.1.4.1.25623.1.0.891611 |
Kategorie: | Debian Local Security Checks |
Titel: | Debian LTS: Security Advisory for libav (DLA-1611-1 and DLA 1611-2) |
Zusammenfassung: | DLA 1611-1:;;Several security issues have been corrected in multiple demuxers and;decoders of the libav multimedia library.;;CVE-2014-9317;; The decode_ihdr_chunk function in libavcodec/pngdec.c allowed remote; attackers to cause a denial of service (out-of-bounds heap access); and possibly had other unspecified impact via an IDAT before an IHDR; in a PNG file. The issue got addressed by checking IHDR/IDAT order.;;CVE-2015-6761;; The update_dimensions function in libavcodec/vp8.c in libav relies on; a coefficient-partition count during multi-threaded operation, which; allowed remote attackers to cause a denial of service (race condition; and memory corruption) or possibly have unspecified other impact via; a crafted WebM file. This issue has been resolved by using; num_coeff_partitions in thread/buffer setup. The variable is not a; constant and can lead to race conditions.;;CVE-2015-6818;; The decode_ihdr_chunk function in libavcodec/pngdec.c did not enforce; uniqueness of the IHDR (aka image header) chunk in a PNG image, which; allowed remote attackers to cause a denial of service (out-of-bounds; array access) or possibly have unspecified other impact via a crafted; image with two or more of these chunks. This has now been fixed by; only allowing one IHDR chunk. Multiple IHDR chunks are forbidden in; PNG.;;Description truncated. Please see the references for more information. |
Beschreibung: | Summary: DLA 1611-1: Several security issues have been corrected in multiple demuxers and decoders of the libav multimedia library. CVE-2014-9317 The decode_ihdr_chunk function in libavcodec/pngdec.c allowed remote attackers to cause a denial of service (out-of-bounds heap access) and possibly had other unspecified impact via an IDAT before an IHDR in a PNG file. The issue got addressed by checking IHDR/IDAT order. CVE-2015-6761 The update_dimensions function in libavcodec/vp8.c in libav relies on a coefficient-partition count during multi-threaded operation, which allowed remote attackers to cause a denial of service (race condition and memory corruption) or possibly have unspecified other impact via a crafted WebM file. This issue has been resolved by using num_coeff_partitions in thread/buffer setup. The variable is not a constant and can lead to race conditions. CVE-2015-6818 The decode_ihdr_chunk function in libavcodec/pngdec.c did not enforce uniqueness of the IHDR (aka image header) chunk in a PNG image, which allowed remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted image with two or more of these chunks. This has now been fixed by only allowing one IHDR chunk. Multiple IHDR chunks are forbidden in PNG. Description truncated. Please see the references for more information. Affected Software/OS: libav on Debian Linux Solution: For Debian 8 'Jessie', these problems have been fixed in version 6:11.12-1~ deb8u3. We recommend that you upgrade your libav packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P |
Querverweis: |
Common Vulnerability Exposure (CVE) ID: CVE-2014-9317 https://security.gentoo.org/glsa/201603-06 https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html Common Vulnerability Exposure (CVE) ID: CVE-2015-6761 BugTraq ID: 77073 http://www.securityfocus.com/bid/77073 Debian Security Information: DSA-3376 (Google Search) http://www.debian.org/security/2015/dsa-3376 https://security.gentoo.org/glsa/201603-09 RedHat Security Advisories: RHSA-2015:1912 http://rhn.redhat.com/errata/RHSA-2015-1912.html http://www.securitytracker.com/id/1033816 http://www.ubuntu.com/usn/USN-2770-1 http://www.ubuntu.com/usn/USN-2770-2 Common Vulnerability Exposure (CVE) ID: CVE-2015-6818 http://www.securitytracker.com/id/1033483 http://www.ubuntu.com/usn/USN-2944-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-6820 Common Vulnerability Exposure (CVE) ID: CVE-2015-6821 Common Vulnerability Exposure (CVE) ID: CVE-2015-6822 https://lists.debian.org/debian-lts-announce/2018/12/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2015-6823 Common Vulnerability Exposure (CVE) ID: CVE-2015-6824 Common Vulnerability Exposure (CVE) ID: CVE-2015-6825 Common Vulnerability Exposure (CVE) ID: CVE-2015-6826 Common Vulnerability Exposure (CVE) ID: CVE-2015-8216 SuSE Security Announcement: openSUSE-SU-2015:2120 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-11/msg00146.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8217 Common Vulnerability Exposure (CVE) ID: CVE-2015-8363 SuSE Security Announcement: openSUSE-SU-2015:2370 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-12/msg00118.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8364 Common Vulnerability Exposure (CVE) ID: CVE-2015-8661 http://www.securitytracker.com/id/1034539 SuSE Security Announcement: openSUSE-SU-2016:0089 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2015-8662 Common Vulnerability Exposure (CVE) ID: CVE-2015-8663 |
Copyright | Copyright (C) 2018 Greenbone Networks GmbH http://greenbone.net |
Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |