AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    (CVE-2020-36129)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202401-32 (libaom: Multiple Vulnerabilities)

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    (CVE-2020-36129)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
    (CVE-2020-36130)

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
    (CVE-2020-36131)

  - AOM v2.0.1 was discovered to contain a global buffer overflow via the component     av1/encoder/partition_search.h. (CVE-2020-36133)

  - AOM v2.0.1 was discovered to contain a segmentation violation via the component     aom_dsp/x86/obmc_sad_avx2.c. (CVE-2020-36134)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
    (CVE-2020-36135)

  - aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
    (CVE-2021-30473)

  - aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. (CVE-2021-30474)

  - aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. (CVE-2021-30475)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1624-1 advisory.

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    (CVE-2020-36129)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
    (CVE-2020-36130)

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
    (CVE-2020-36131)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
    (CVE-2020-36135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:4170-1 advisory.

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    (CVE-2020-36129)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
    (CVE-2020-36130)

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
    (CVE-2020-36131)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
    (CVE-2020-36135)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:4170-1 advisory.

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
    (CVE-2020-36129)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
    (CVE-2020-36130)

  - AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
    (CVE-2020-36131)

  - AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
    (CVE-2020-36135)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
258629	Linux Distros Unpatched Vulnerability : CVE-2020-36129	Nessus	Misc.	high
189845	GLSA-202401-32 : libaom: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
156316	openSUSE 15 Security Update : libaom (openSUSE-SU-2021:1624-1)	Nessus	SuSE Local Security Checks	high
156283	SUSE SLED15 / SLES15 Security Update : libaom (SUSE-SU-2021:4170-1)	Nessus	SuSE Local Security Checks	high
156275	openSUSE 15 Security Update : libaom (openSUSE-SU-2021:4170-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-36129

high

Tenable Plugins

high

critical

high

high

high