CVE-2016-7953
libXvMC: Insufficient validation of server responses results in buffer underflow
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Red Hat (moyenne), Ubuntu (faible).
Description
Buffer underflow in X.org libXvMC before 1.0.10 allows remote X servers to have unspecified impact via an empty string.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.2 | libxvmc | 1.0.9-r1 |
| alpine 3.3 | libxvmc | 1.0.9-r1 |
| debian 11 | libxvmc | 2:1.0.10-1 |
| debian 12 | libxvmc | 2:1.0.10-1 |
| debian 13 | libxvmc | 2:1.0.10-1 |
| debian 14 | libxvmc | 2:1.0.10-1 |
| debian 7 | libxvmc | 2:1.0.7-1+deb7u3 |
| debian 8 | libxvmc | 2:1.0.8-2+deb8u1 |
| echo | libxvmc | 2:1.0.10-1 |
| Red Hat | libXvMC, libXvMC-devel | pas de correctif indiqué |
| ubuntu 18.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 18.04-ESM | libxvmc | 2:1.0.10-1 |
Afficher les 31 entrées de 30 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| alpine 3.2 | libxvmc | 1.0.9-r1 |
| alpine 3.3 | libxvmc | 1.0.9-r1 |
| debian 11 | libxvmc | 2:1.0.10-1 |
| debian 12 | libxvmc | 2:1.0.10-1 |
| debian 13 | libxvmc | 2:1.0.10-1 |
| debian 14 | libxvmc | 2:1.0.10-1 |
| debian 7 | libxvmc | 2:1.0.7-1+deb7u3 |
| debian 8 | libxvmc | 2:1.0.8-2+deb8u1 |
| echo | libxvmc | 2:1.0.10-1 |
| Red Hat | libXvMC | pas de correctif indiqué |
| Red Hat | libXvMC-devel | pas de correctif indiqué |
| ubuntu 18.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 18.04-ESM | libxvmc | 2:1.0.10-1 |
| ubuntu 18.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 19.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 19.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 20.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 20.04-ESM | libxvmc | 2:1.0.10-1 |
| ubuntu 20.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 21.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 21.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 22.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 22.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 23.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 23.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 24.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 24.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 25.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 25.10 | libxvmc | 2:1.0.10-1 |
| ubuntu 26.04 | libxvmc | 2:1.0.10-1 |
| ubuntu 26.10 | libxvmc | 2:1.0.10-1 |
Références
- http://www.openwall.com/lists/oss-security/2016/10/04/2
- http://www.openwall.com/lists/oss-security/2016/10/04/4
- http://www.securityfocus.com/bid/93371
- http://www.securitytracker.com/id/1036945
- https://access.redhat.com/security/cve/CVE-2016-7953
- https://cgit.freedesktop.org/xorg/lib/libXvMC/commit/?id=2cd95e7da8367cccdcdd5c9b160012d1dec5cbdb
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DLZ3CBE3LKTSHIQYM6RKZYJ5PJ5IGTYG/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M4SI52ZOHOK6524DI2TOW4DX6HPKNFNB/