CVE-2024-5171
libaom: Integer overflow in internal function img_alloc_helper
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Julia. Más baja según Red Hat (media), Ubuntu (media).
Descripción
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | libaom_jll | 3.11.0+0 |
| alpine 3.20 | aom | 3.9.1-r0 |
| alpine 3.21 | aom | 3.9.1-r0 |
| alpine 3.22 | aom | 3.9.1-r0 |
| alpine 3.23 | aom | 3.9.1-r0 |
| alpine 3.24 | aom | 3.9.1-r0 |
| alpine edge | aom | 3.9.1-r0 |
| debian 11 | aom | 1.0.0.errata1-3+deb11u2 |
| debian 12 | aom | 3.6.0-1+deb12u1 |
| debian 13 | aom | 3.8.2-3 |
| debian 14 | aom | 3.8.2-3 |
| echo | aom | 3.6.0-1+deb12u1 |
Mostrar las 42 entradas de 26 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | libaom_jll | 3.11.0+0 |
| alpine 3.20 | aom | 3.9.1-r0 |
| alpine 3.21 | aom | 3.9.1-r0 |
| alpine 3.22 | aom | 3.9.1-r0 |
| alpine 3.23 | aom | 3.9.1-r0 |
| alpine 3.24 | aom | 3.9.1-r0 |
| alpine edge | aom | 3.9.1-r0 |
| debian 11 | aom | 1.0.0.errata1-3+deb11u2 |
| debian 12 | aom | 3.6.0-1+deb12u1 |
| debian 13 | aom | 3.8.2-3 |
| debian 14 | aom | 3.8.2-3 |
| echo | aom | 3.6.0-1+deb12u1 |
| rapidfort alma 8 | firefox | sin corrección indicada |
| rapidfort alma 8 | thunderbird | sin corrección indicada |
| rapidfort alma 9 | firefox | sin corrección indicada |
| rapidfort alma 9 | firefox-x11 | sin corrección indicada |
| rapidfort alma 9 | thunderbird | sin corrección indicada |
| rapidfort fedora 41 | aom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | libaom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | rf-aom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | rf-libaom | 0:3.9.0-4.fc41 |
| rapidfort Oracle Linux 9 | firefox | sin corrección indicada |
| rapidfort Oracle Linux 9 | firefox-x11 | sin corrección indicada |
| rapidfort Oracle Linux 9 | thunderbird | sin corrección indicada |
| rapidfort rocky 8 | firefox | sin corrección indicada |
| rapidfort rocky 8 | thunderbird | sin corrección indicada |
| rapidfort rocky 9 | firefox | sin corrección indicada |
| rapidfort rocky 9 | firefox-x11 | sin corrección indicada |
| rapidfort rocky 9 | thunderbird | sin corrección indicada |
| Red Hat | firefox | sin corrección indicada |
| Red Hat | firefox-x11 | sin corrección indicada |
| Red Hat | firefox:flatpak::firefox | sin corrección indicada |
| Red Hat | firefox:flatpak::firefox-x11 | sin corrección indicada |
| Red Hat | thunderbird | sin corrección indicada |
| Red Hat | thunderbird:flatpak::thunderbird | sin corrección indicada |
| root.io debian 11 | rootio-aom | 1.0.0.errata1-3+deb11u2 |
| root.io debian 12 | rootio-aom | 3.6.0-1+deb12u1 |
| ubuntu 20.04 | aom | 1.0.0.errata1-3+deb11u1ubuntu0.1 |
| ubuntu 20.04-ESM | aom | 1.0.0.errata1-3+deb11u1ubuntu0.1 |
| ubuntu 22.04 | aom | 3.3.0-1ubuntu0.1 |
| ubuntu 24.04 | aom | 3.8.2-2ubuntu0.1 |
| ubuntu 24.10 | aom | 3.8.2-2ubuntu1 |
Referencias
- https://access.redhat.com/security/cve/CVE-2024-5171
- https://issues.chromium.org/issues/332382766
- https://lists.debian.org/debian-lts-announce/2024/09/msg00024.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
- https://nvd.nist.gov/vuln/detail/CVE-2024-5171
- https://ubuntu.com/security/notices/USN-6815-1
- https://ubuntu.com/security/notices/USN-7397-1