CVE-2021-35452: Medium severity struktur libde265 vulnerability
Published Jan 10, 2022
·Updated
An Incorrect Access Control vulnerability exists in libde265 v1.0.8 due to a SEGV in slice.cc.
Affected Software
3 affected componentsFixes available
struktur libde265=1.0.8
Debian Debian Linux=10.0
debian/libde265
1.0.11-1+deb12u21.0.11-1+deb12u31.0.15-1+deb13u21.1.3-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libde265to a version that resolves this vulnerability.Fixed in 1.0.11-1+deb12u2Fixed in 1.0.11-1+deb12u3Fixed in 1.0.15-1+deb13u2Fixed in 1.1.3-1
Event History
Jan 10, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2021-35452?
CVE-2021-35452 is an Incorrect Access Control vulnerability in libde265 v1.0.8.
2
What is the severity of CVE-2021-35452?
The severity of CVE-2021-35452 is medium with a CVSS score of 6.5.
3
How does CVE-2021-35452 affect the software?
CVE-2021-35452 affects Struktur Libde265 version 1.0.8 and Debian Linux version 10.0.
4
How can I fix CVE-2021-35452?
To fix CVE-2021-35452, update to one of the recommended versions: 1.0.11-0+deb10u4, 1.0.11-0+deb11u1, 1.0.11-1, or 1.0.12-2.
5
Where can I find more information about CVE-2021-35452?
You can find more information about CVE-2021-35452 at the following references: [link1], [link2], [link3].