Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0098 advisory.

    This advisory aggregates security fixes for the libwebp SRPM in CIQ LTS 8.6. It addresses 2 CVEs:
    CVE-2023-4863, CVE-2016-9085.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201701-61 (WebP: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in WebP&rsquo;s gif2webp tool.
      Please review the CVE identifier and bug reference for details.
  Impact :

    A remote attacker, by enticing a user to process a specially crafted       file using WebP&rsquo;s gif2webp tool, could possibly cause a Denial of       Service condition or other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

This update backports an upstream patch to fix multiple integer overflows (CVE-2016-9085).

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
358869	Rocky Linux 8.6 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0098)	Nessus	Rocky Linux Local Security Checks	Local	high
96747	GLSA-201701-61 : WebP: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	low
94995	Fedora 25 : mingw-libwebp (2016-301724f38e)	Nessus	Fedora Local Security Checks	Local	low
94992	Fedora 25 : libwebp (2016-26ef59f03d)	Nessus	Fedora Local Security Checks	Local	low
94745	Fedora 24 : mingw-libwebp (2016-00d2f5c19f)	Nessus	Fedora Local Security Checks	Local	low
94523	Fedora 24 : libwebp (2016-160ec6525e)	Nessus	Fedora Local Security Checks	Local	low

Detections

Analytics

CVE-2016-9085

low

Tenable Plugins

high

low

low

low

low

low