Heap-based buffer overflow in Alliance for Open Media - CVE-2023-6879

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU85010

Heap-based buffer overflow in Alliance for Open Media - CVE-2023-6879

Published: January 5, 2024


Vulnerability identifier: #VU85010
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-6879
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the av1_loop_restoration_dealloc() function. A remote attacker can trick the victim to open a specially crafted video file, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Affected software

Alliance for Open Media
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Desktop 15 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
Fedora
Basesystem Module
openSUSE Leap
openEuler
Anolis OS
libaom3-64bit
libaom3
libaom-debugsource
libaom3-debuginfo
aom-tools
aom-tools-debuginfo
libaom-devel
libaom-devel-doc
libaom3-32bit
libaom3-32bit-debuginfo
libaom3-64bit-debuginfo
aom-doc
aom
libaom
chromium
firefox-debugsource
firefox-debuginfo
firefox
libyuv-tools-debuginfo
libyuv-debugsource
libyuv0-32bit
libyuv-devel
libyuv0-64bit
libyuv0-64bit-debuginfo
libyuv-tools
libyuv0-debuginfo
libyuv0
libyuv0-32bit-debuginfo

How to mitigate CVE-2023-6879

Install updates from vendor's website.

Alliance for Open Media - update to 3.7.1
libaom3-64bit - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom3 - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom-debugsource - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom3-debuginfo - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
aom-tools - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
aom-tools-debuginfo - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom-devel - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom-devel-doc - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom3-32bit - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom3-32bit-debuginfo - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
libaom3-64bit-debuginfo - addressed in versions 3.2.0-150400.3.3.1, 3.7.1-150400.3.9.1
aom-doc - update to 3.7.1-1
aom - update to 3.7.1-1
libaom - update to 3.7.1-1
libaom-devel - update to 3.7.1-1
chromium - addressed in versions 120.0.6099.199-1.el7, 120.0.6099.199-1.el8, 120.0.6099.199-1.el9, 120.0.6099.199-1.fc38, 120.0.6099.199-1.fc39
firefox-debugsource - update to 128.8.0-1
firefox-debuginfo - update to 128.8.0-1
firefox - update to 128.8.0-1
libyuv-tools-debuginfo - update to 20230517+a377993-150400.9.3.1
libyuv-debugsource - update to 20230517+a377993-150400.9.3.1
libyuv0-32bit - update to 20230517+a377993-150400.9.3.1
libyuv-devel - update to 20230517+a377993-150400.9.3.1
libyuv0-64bit - update to 20230517+a377993-150400.9.3.1
libyuv0-64bit-debuginfo - update to 20230517+a377993-150400.9.3.1
libyuv-tools - update to 20230517+a377993-150400.9.3.1
libyuv0-debuginfo - update to 20230517+a377993-150400.9.3.1
libyuv0 - update to 20230517+a377993-150400.9.3.1
libyuv0-32bit-debuginfo - update to 20230517+a377993-150400.9.3.1

External References

Related Security Bulletins