Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

The remote NewStart CGSL host, running version MAIN 7.02, has firefox packages installed that are affected by multiple vulnerabilities:

  - Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This     function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or     align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some     fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of     the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and     offsets and some fields of the returned aom_image_t struct may be invalid. * Calling     aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may     result in integer overflows in the calculations of buffer sizes and offsets and some fields of the     returned aom_image_t struct may be invalid. (CVE-2024-5171)

  - A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox <     113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32211)

  - An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability     affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32212)

  - When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects     Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32213)

  - During the worker lifecycle, a use-after-free condition could have occured, which could have led to a     potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and     Thunderbird < 115.0.1. (CVE-2023-3600)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0525 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-5197:
    There exists interger overflows in libvpx in versions prior to 1.14.1.Calling vpx_img_alloc()with a     large value of the d_w, d_h, or alignparameter may result in integer overflows in the calculations of     buffer sizes and offsets and some fields of the returned vpx_image_tstruct may be invalid.Calling     vpx_img_wrap()with a large value of the d_w, d_h, or stride_alignparameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned     vpx_image_tstruct may be invalid. We recommend upgrading to version 1.14.1 or beyond

    CVE-2024-5171:
    Integer overflow in libaom internal functionimg_alloc_helper can lead to heap buffer overflow. This     function can be reached via 3 callers:


    *  Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t     struct may be invalid.
    *  Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t     struct may be invalid.
    *  Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border     parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields     of the returned aom_image_t struct may be invalid.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0714 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2024-5171:
    Integer overflow in libaom internal functionimg_alloc_helper can lead to heap buffer overflow. This     function can be reached via 3 callers:

    *  Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t     struct may be invalid.
    *  Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer     overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t     struct may be invalid.
    *  Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border     parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields     of the returned aom_image_t struct may be invalid.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7397-1 advisory.

    Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application     using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly     execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This     function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or     align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some     fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of     the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and     offsets and some fields of the returned aom_image_t struct may be invalid. * Calling     aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may     result in integer overflows in the calculations of buffer sizes and offsets and some fields of the     returned aom_image_t struct may be invalid. (CVE-2024-5171)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3881 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3881-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Adrian Bunk     September 07, 2024                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : aom     Version        : 1.0.0.errata1-3+deb11u2     CVE ID         : CVE-2024-5171

    Integer overflows have been fixed in aom, an AV1 Codec Library.

    For Debian 11 bullseye, this problem has been fixed in version     1.0.0.errata1-3+deb11u2.

    We recommend that you upgrade your aom packages.

    For the detailed security status of aom please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/aom

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5753 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5753-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     August 21, 2024                       https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : aom     CVE ID         : CVE-2024-5171

    An integer overflow was discovered in aom, the AV1 Video Codec Library,     which could potentially result in the execution of arbitrary code if a     malformed media file is processed.

    For the stable distribution (bookworm), this problem has been fixed in     version 3.6.0-1+deb12u1.

    We recommend that you upgrade your aom packages.

    For the detailed security status of aom please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/aom

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-d2b54d5a9d advisory.

    update to 126.0.6478.114

    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-dd14eefb0e advisory.

    update to 126.0.6478.114

    * High CVE-2024-6100: Type Confusion in V8
    * High CVE-2024-6101: Inappropriate implementation in WebAssembly
    * High CVE-2024-6102: Out of bounds memory access in Dawn
    * High CVE-2024-6103: Use after free in Dawn

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2056-1 advisory.

    - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow     (bsc#1226020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2024:2030-1 advisory.

    - CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow     (bsc#1226020).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6815-1 advisory.

    Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application     using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly     execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
242713	NewStart CGSL MAIN 7.02 : firefox Multiple Vulnerabilities (NS-SA-2025-0109)	Nessus	NewStart CGSL Local Security Checks	critical
239713	TencentOS Server 4: libvpx (TSSA-2024:0525)	Nessus	Tencent Local Security Checks	medium
239336	TencentOS Server 4: aom (TSSA-2024:0714)	Nessus	Tencent Local Security Checks	critical
233573	Ubuntu 20.04 LTS / 22.04 LTS : AOM vulnerability (USN-7397-1)	Nessus	Ubuntu Local Security Checks	critical
231512	Linux Distros Unpatched Vulnerability : CVE-2024-5171	Nessus	Misc.	critical
206764	Debian dla-3881 : aom-tools - security update	Nessus	Debian Local Security Checks	critical
206010	Debian dsa-5753 : aom-tools - security update	Nessus	Debian Local Security Checks	critical
200825	Fedora 40 : chromium (2024-d2b54d5a9d)	Nessus	Fedora Local Security Checks	critical
200797	Fedora 39 : chromium (2024-dd14eefb0e)	Nessus	Fedora Local Security Checks	critical
200710	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libaom (SUSE-SU-2024:2056-1)	Nessus	SuSE Local Security Checks	critical
200636	SUSE SLES15 Security Update : libaom (SUSE-SU-2024:2030-1)	Nessus	SuSE Local Security Checks	critical
200176	Ubuntu 24.04 LTS : AOM vulnerability (USN-6815-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2024-5171

critical

Tenable Plugins

critical

medium

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical