USN-6677-1: libde265 vulnerabilities
It was discovered that libde265 could be made to dereference invalid memory. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2023-27102) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2023-27103) It was discovered that libde265 could be made to write out of bounds. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2023-43887, CVE-2023-47471, CVE-2023-49465, CVE-2023-49467, CVE-2023-49468)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6677-1?
USN-6677-1 is considered to pose a potential denial of service risk.
How do I fix USN-6677-1?
To fix USN-6677-1, update the libde265 package to the appropriate version for your Ubuntu distribution.
Which Ubuntu versions are affected by USN-6677-1?
USN-6677-1 affects Ubuntu 16.04, 18.04, 20.04, 22.04, and 23.10.
What is the cause of the vulnerability described in USN-6677-1?
The vulnerability in USN-6677-1 is caused by libde265 being able to dereference invalid memory.
Can USN-6677-1 lead to a remote attack?
USN-6677-1 does not directly enable remote attacks but can be exploited if a user opens a specially crafted file.