Race condition in dav1d - CVE-2023-32570

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79791

Race condition in dav1d - CVE-2023-32570

Published: August 21, 2023


Vulnerability identifier: #VU79791
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-32570
CWE-ID: CWE-362
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition in thread_task.c, related to dav1d_decode_frame_exit(). A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.


Affected software

dav1d
Gentoo Linux
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
Fedora
Desktop Applications Module
SUSE Package Hub 15
openSUSE Leap
dav1d-debuginfo
libdav1d6-debuginfo
dav1d-debugsource
libdav1d6
dav1d
dav1d-devel
libdav1d6-32bit
libdav1d6-32bit-debuginfo
libdav1d6-64bit-debuginfo
libdav1d6-64bit
media-libs/dav1d

How to mitigate CVE-2023-32570

Install updates from vendor's website.

dav1d - update to 1.2.0
dav1d-debuginfo - update to 1.0.0-150500.3.3.1
libdav1d6-debuginfo - update to 1.0.0-150500.3.3.1
dav1d-debugsource - update to 1.0.0-150500.3.3.1
libdav1d6 - update to 1.0.0-150500.3.3.1
dav1d - update to 1.0.0-150500.3.3.1
dav1d-devel - update to 1.0.0-150500.3.3.1
libdav1d6-32bit - update to 1.0.0-150500.3.3.1
libdav1d6-32bit-debuginfo - update to 1.0.0-150500.3.3.1
libdav1d6-64bit-debuginfo - update to 1.0.0-150500.3.3.1
libdav1d6-64bit - update to 1.0.0-150500.3.3.1
media-libs/dav1d - update to 1.2.0
dav1d - addressed in versions 1.2.1-1.el9, 1.2.1-1.fc37, 1.2.1-1.fc38

External References

Related Security Bulletins