A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1207 advisory.

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

    There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a     large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of     buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling     vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t     struct may be invalid. We recommend upgrading to version 1.14.1 or beyond (CVE-2024-5197)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libvpx installed on the remote host is prior to 1.9.0-5. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2960 advisory.

    VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. (CVE-2023-44488)

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0177 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2023-6349:
    A heap overflow vulnerability exists in libvpx -Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.
    We recommend upgrading to version 1.13.1 or above

    CVE-2024-5197:
    There exists interger overflows in libvpx in versions prior to 1.14.1.Calling vpx_img_alloc()with a     large value of the d_w, d_h, or alignparameter may result in integer overflows in the calculations of     buffer sizes and offsets and some fields of the returned vpx_image_tstruct may be invalid.Calling     vpx_img_wrap()with a large value of the d_w, d_h, or stride_alignparameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned     vpx_image_tstruct may be invalid. We recommend upgrading to version 1.14.1 or beyond

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5941 advisory.

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)

    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

Tenable has extracted the preceding description block directly from the Rocky Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:5941 advisory.

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)
    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-5941 advisory.

    [1.7.0-11]
    - Add patch to fix integer overflows.
    - Fix compilation by including limits.h
    - Resolves: RHEL-40650

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5941 advisory.

    The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec,     commonly used with the WebM multimedia container file format.

    Security Fix(es):

    * libvpx: Heap buffer overflow related to VP9 encoding (CVE-2023-6349)

    * libvpx: Integer overflow in vpx_img_alloc() (CVE-2024-5197)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of thunderbird installed on the remote host is prior to 115.12.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2617 advisory.

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of firefox installed on the remote host is prior to 115.13.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2024-027 advisory.

    A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the     originally configured size with VP9 may result in a heap overflow in libvpx.We recommend upgrading to     version 1.13.1 or above (CVE-2023-6349)

    By monitoring the time certain operations take, an attacker could have guessed which external protocol     handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR <     115.12, and Thunderbird < 115.12. (CVE-2024-5690)

    By manipulating the text in an `<input>` tag, an attacker could have caused corrupt memory leading     to a potentially exploitable crash. This vulnerability affects Firefox < 127 and Firefox ESR < 115.12.
    (CVE-2024-5696)

    A race condition could lead to a cross-origin container obtaining permissions of the top-level origin.
    This vulnerability affects Firefox < 128 and Firefox ESR < 115.13. (CVE-2024-6601)

    A mismatch between allocator and deallocator could have lead to memory corruption. This vulnerability     affects Firefox < 128 and Firefox ESR < 115.13. (CVE-2024-6602)

    In an out-of-memory scenario an allocation could fail but free would have been called on the pointer     afterwards leading to memory corruption. This vulnerability affects Firefox < 128 and Firefox ESR <     115.13. (CVE-2024-6603)

    Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Firefox ESR < 115.13.
    (CVE-2024-6604)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-47dbf2a4de advisory.

    Security fix for CVE-2023-6349 & FTBFS fixes


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2409-1 advisory.

    - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large     parameters (bsc#1225879).
    - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally     configured size (bsc#1225403).
    - CVE-2023-44488: Fixed heap buffer overflow in vp8 encoding (bsc#1216879).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2408-1 advisory.

    - CVE-2024-5197: Fixed interger overflow when calling vpx_img_alloc() or vpx_img_wrap() with large     parameters (bsc#1225879).
    - CVE-2023-6349: Fixed heap overflow when encoding a frame that has larger dimensions than the originally     configured size (bsc#1225403).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
266147	Amazon Linux 2023 : libvpx, libvpx-devel, libvpx-utils (ALAS2023-2025-1207)	Nessus	Amazon Linux Local Security Checks	medium
243419	Amazon Linux 2 : libvpx (ALAS-2025-2960)	Nessus	Amazon Linux Local Security Checks	medium
236153	Alibaba Cloud Linux 3 : 0177: libvpx (ALINUX3-SA-2024:0177)	Nessus	Alibaba Cloud Linux Local Security Checks	medium
225869	Linux Distros Unpatched Vulnerability : CVE-2023-6349	Nessus	Misc.	medium
207310	Rocky Linux 8 : libvpx (RLSA-2024:5941)	Nessus	Rocky Linux Local Security Checks	medium
206323	AlmaLinux 8 : libvpx (ALSA-2024:5941)	Nessus	Alma Linux Local Security Checks	medium
206313	Oracle Linux 8 : libvpx (ELSA-2024-5941)	Nessus	Oracle Linux Local Security Checks	medium
206278	RHEL 8 : libvpx (RHSA-2024:5941)	Nessus	Red Hat Local Security Checks	medium
205729	Amazon Linux 2 : thunderbird (ALAS-2024-2617)	Nessus	Amazon Linux Local Security Checks	medium
205700	Amazon Linux 2 : firefox (ALASFIREFOX-2024-027)	Nessus	Amazon Linux Local Security Checks	medium
204935	Fedora 40 : obs-cef (2024-47dbf2a4de)	Nessus	Fedora Local Security Checks	medium
202250	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libvpx (SUSE-SU-2024:2409-1)	Nessus	SuSE Local Security Checks	medium
202248	SUSE SLED15 / SLES15 Security Update : libvpx (SUSE-SU-2024:2408-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2023-6349

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium