A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback when running program dec265.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.
    (CVE-2021-35452)

  - An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free in intrapred.h when decoding
    file using dec265. (CVE-2021-36408)

  - A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in function put_epel_hv_fallback
    when running program dec265. (CVE-2021-36410)

  - An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory
    access in function derive_boundaryStrength of deblock.cc has occurred. The vulnerability causes a
    segmentation fault and application crash, which leads to remote denial of service. (CVE-2021-36411)

  - Heap-based Buffer Overflow in GitHub repository strukturag/libde265 prior to and including 1.0.8. The fix
    is established in commit 8e89fe0e175d2870c39486fdd09250b230ec10b8 but does not yet belong to an official
    release. (CVE-2022-1253)

The remote host is affected by the vulnerability described in GLSA-202408-20 (libde265: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in libde265. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6627-1 advisory.

    It was discovered that libde265 could be made to read out of bounds. If a user or automated system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service. (CVE-2021-35452, CVE-2021-36411, CVE-2022-43238, CVE-2022-43241, CVE-2022-43242)

    It was discovered that libde265 did not properly manage memory. If a user or automated system were tricked     into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of     service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2021-36408)

    It was discovered that libde265 contained a logical error. If a user or automated system were tricked into     opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service.
    (CVE-2021-36409)

    It was discovered that libde265 could be made to write out of bounds. If a user or automated system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. (CVE-2021-36410, CVE-2022-43235, CVE-2022-43236, CVE-2022-43237,     CVE-2022-43239, CVE-2022-43240, CVE-2022-43243, CVE-2022-43248, CVE-2022-43252, CVE-2022-43253)

    It was discovered that libde265 could be made to write out of bounds. If a user or automated system were     tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial     of service or execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-1253)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5346 advisory.

    Multiple security issues were discovered in libde265, an implementation of the H.265 video codec which may     result in denial of service and potentially the execution of arbitrary code if a malformed media file is     processed. For the stable distribution (bullseye), these problems have been fixed in version     1.0.11-0+deb11u1. We recommend that you upgrade your libde265 packages. For the detailed security status     of libde265 please refer to its security tracker page at: https://security-     tracker.debian.org/tracker/libde265

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3240 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3240-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                         Tobias Frost     December 15, 2022                             https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : libde265     Version        : 1.0.3-1+deb10u1     CVE ID         : CVE-2020-21599 CVE-2021-35452 CVE-2021-36408 CVE-2021-36409                      CVE-2021-36410 CVE-2021-36411     Debian Bug     : 1014977

    Multiple issues were found in libde265, an open source implementation of the     h.265 video codec, which may result in denial of or have unspecified other     impact.


    CVE-2020-21599

        libde265 v1.0.4 contains a heap buffer overflow in the         de265_image::available_zscan function, which can be exploited via a crafted         a file.

    CVE-2021-35452

        An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to         a SEGV in slice.cc.

    CVE-2021-36408

        libde265 v1.0.8 contains a Heap-use-after-free in intrapred.h when decoding         file using dec265.

    CVE-2021-36409

        There is an Assertion `scaling_list_pred_matrix_id_delta==1' failed at         sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to         cause a Denial of Service (DoS) by running the application with a crafted         file or possibly have unspecified other impact.

    CVE-2021-36410

        A stack-buffer-overflow exists in libde265 v1.0.8 via fallback-motion.cc in         function put_epel_hv_fallback when running program dec265.

    CVE-2021-36411

        An issue has been found in libde265 v1.0.8 due to incorrect access control.
        A SEGV caused by a READ memory access in function derive_boundaryStrength of         deblock.cc has occurred. The vulnerability causes a segmentation fault and         application crash, which leads to remote denial of service.

    For Debian 10 buster, these problems have been fixed in version     1.0.3-1+deb10u1.

    We recommend that you upgrade your libde265 packages.

    For the detailed security status of libde265 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/libde265

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: PGP signature

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
424018	Alpine: multiple libde265 packages: security update to 1.0.8-r2	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
424018	Alpine: multiple libde265 packages: security update to 1.0.8-r2	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
205344	GLSA-202408-20 : libde265: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
190241	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : libde265 vulnerabilities (USN-6627-1)	Nessus	Ubuntu Local Security Checks	critical
171376	Debian DSA-5346-1 : libde265 - security update	Nessus	Debian Local Security Checks	critical
168855	Debian dla-3240 : libde265-0 - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2021-36410

medium

Tenable Plugins

critical

critical

critical

critical

critical

high