USN-6617-1: libde265 vulnerabilities
It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2020-21594) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2020-21595, CVE-2020-21596, CVE-2020-21599, CVE-2020-21600, CVE-2020-21601, CVE-2020-21602, CVE-2020-21603, CVE-2020-21604, CVE-2020-21605) It was discovered that libde265 did not properly manage memory. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-21597, CVE-2020-21598, CVE-2020-21606, CVE-2021-36408)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6617-1?
The severity of USN-6617-1 is considered high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-6617-1?
To fix USN-6617-1, upgrade the libde265-0 package to the recommended versions specified in the advisory.
What versions of Ubuntu are affected by USN-6617-1?
USN-6617-1 affects Ubuntu 20.04, 18.04, and 16.04 with specific versions of the libde265-0 package.
Can I exploit the vulnerability in USN-6617-1 directly?
Yes, an attacker could exploit USN-6617-1 by tricking users or systems into opening a specially crafted file.
What is the potential impact of the vulnerability identified in USN-6617-1?
The potential impact of USN-6617-1 includes causing a denial of service or executing arbitrary code on affected systems.