Integer overflow in libvpx - CVE-2024-5197

Vulnerability identifier: #VU90121

CSH Severity: High

CVSS v4 BT: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2024-5197

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in the vpx_img_alloc() and vpx_img_wrap() functions. A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

libvpx
Oracle Solaris
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Manager Server
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
Anolis OS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Ubuntu
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
SUSE Package Hub 15
Basesystem Module
Desktop Applications Module
openSUSE Leap
openEuler
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libvpx5 (Ubuntu package)
vpx-tools (Ubuntu package)
libvpx1 (Ubuntu package)
libvpx3 (Ubuntu package)
libvpx4-debuginfo
libvpx4
libvpx-debugsource
libvpx-devel
libvpx
libvpx-debuginfo
libvpx (Red Hat package)
libvpx-doc
libvpx6 (Ubuntu package)
libvpx (Debian package)
libvpx7 (Ubuntu package)
libvpx7-64bit
libvpx7-debuginfo
libvpx7
vpx-tools
vpx-tools-debuginfo
libvpx7-32bit
libvpx7-32bit-debuginfo
libvpx7-64bit-debuginfo
libvpx-utils
libvpx9 (Ubuntu package)
IBM QRadar Incident Forensics

Install updates from vendor's website.

libvpx - update to 1.14.1
Oracle Solaris - update to 11.4 SRU 71
IBM Qradar SIEM - update to 7.5.0 Update Pack 10
libvpx5 (Ubuntu package) - update to Ubuntu Pro
vpx-tools (Ubuntu package) - update to Ubuntu Pro
libvpx1 (Ubuntu package) - update to vpx-tools
libvpx3 (Ubuntu package) - update to Ubuntu Pro
libvpx4-debuginfo - update to 1.6.1-150000.6.16.1
libvpx4 - update to 1.6.1-150000.6.16.1
libvpx-debugsource - addressed in versions 1.6.1-150000.6.16.1, 1.11.0-150400.3.7.1
libvpx-devel - addressed in versions 1.6.1-150000.6.16.1, 1.11.0-150400.3.7.1
libvpx - update to 1.7.0-11
libvpx-debugsource - update to 1.7.0-11
libvpx-devel - update to 1.7.0-11
libvpx-debuginfo - update to 1.7.0-11
libvpx (Red Hat package) - addressed in versions 1.7.0-11.el8_10, 1.9.0-7.el9_0.2, 1.9.0-7.el9_2.2, 1.9.0-7.el9_4.2, 1.9.0-8.el9_5
libvpx-devel - addressed in versions 1.7.0-11.0.1, 1.12.0-4
libvpx - addressed in versions 1.7.0-11.0.1, 1.12.0-4
libvpx-doc - addressed in versions 1.7.0-11.0.1, 1.12.0-4
libvpx6 (Ubuntu package) - update to 1.8.2-1ubuntu0.3
libvpx (Debian package) - addressed in versions 1.9.0-1+deb11u3, 1.12.0-1+deb12u3
libvpx7 (Ubuntu package) - addressed in versions 1.11.0-2ubuntu2.3, 1.12.0-1ubuntu2.1
libvpx7-64bit - update to 1.11.0-150400.3.7.1
libvpx7-debuginfo - update to 1.11.0-150400.3.7.1
libvpx7 - update to 1.11.0-150400.3.7.1
vpx-tools - update to 1.11.0-150400.3.7.1
vpx-tools-debuginfo - update to 1.11.0-150400.3.7.1
libvpx7-32bit - update to 1.11.0-150400.3.7.1
libvpx7-32bit-debuginfo - update to 1.11.0-150400.3.7.1
libvpx7-64bit-debuginfo - update to 1.11.0-150400.3.7.1
libvpx-utils - update to 1.12.0-4
libvpx9 (Ubuntu package) - update to 1.14.0-1ubuntu2.1
IBM QRadar Incident Forensics - update to 7.5.0.10

• https://github.com/webmproject/libvpx/releases/tag/v1.14.1

• Multiple vulnerabilities in libvpx
• Ubuntu update for libvpx
• openEuler update for libvpx
• Debian update for libvpx
• SUSE update for libvpx
• SUSE update for libvpx
• Red Hat Enterprise Linux 8 update for libvpx
• Oracle Solaris update for thrid-party components
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in QRadar Incident Forensics
• Red Hat Enterprise Linux 9 update for libvpx
• Ubuntu update for libvpx
• Anolis OS update for libvpx
• Anolis OS update for libvpx
• Red Hat Enterprise Linux 9 update for libvpx
• Red Hat Enterprise Linux 9 update for libvpx
• Red Hat Enterprise Linux 9 update for libvpx