USN-6403-1: libvpx vulnerabilities
It was discovered that libvpx did not properly handle certain malformed media files. If an application using libvpx opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/libvpx7to a version that resolves this vulnerability.Fixed in 1.12.0-1ubuntu1.2 - Upgrade
Upgrade
ubuntu/libvpx7to a version that resolves this vulnerability.Fixed in 1.11.0-2ubuntu2.2 - Upgrade
Upgrade
ubuntu/libvpx6to a version that resolves this vulnerability.Fixed in 1.8.2-1ubuntu0.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this advisory?
The vulnerability ID for this advisory is USN-6403-1.
What software is affected by this vulnerability?
The libvpx software is affected by this vulnerability.
What is the impact of this vulnerability?
This vulnerability can cause a denial of service or possibly execute arbitrary code.
How can I fix this vulnerability?
To fix this vulnerability, update libvpx to version 1.12.0-1ubuntu1.2 for Ubuntu 23.04, 1.11.0-2ubuntu2.2 for Ubuntu 22.04, or 1.8.2-1ubuntu0.2 for Ubuntu 20.04.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found at the following references: [LINK1], [LINK2].