CVE-2024-5171
libaom: Integer overflow in internal function img_alloc_helper
Sévérité par source
Le label propre à Trivy est CRITICAL. Critique selon NVD, Julia. Plus basse selon Red Hat (moyenne), Ubuntu (moyenne).
Description
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | libaom_jll | 3.11.0+0 |
| alpine 3.20 | aom | 3.9.1-r0 |
| alpine 3.21 | aom | 3.9.1-r0 |
| alpine 3.22 | aom | 3.9.1-r0 |
| alpine 3.23 | aom | 3.9.1-r0 |
| alpine 3.24 | aom | 3.9.1-r0 |
| alpine edge | aom | 3.9.1-r0 |
| debian 11 | aom | 1.0.0.errata1-3+deb11u2 |
| debian 12 | aom | 3.6.0-1+deb12u1 |
| debian 13 | aom | 3.8.2-3 |
| debian 14 | aom | 3.8.2-3 |
| echo | aom | 3.6.0-1+deb12u1 |
Afficher les 42 entrées de 26 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| julia::Julia Ecosystem Security Advisories | libaom_jll | 3.11.0+0 |
| alpine 3.20 | aom | 3.9.1-r0 |
| alpine 3.21 | aom | 3.9.1-r0 |
| alpine 3.22 | aom | 3.9.1-r0 |
| alpine 3.23 | aom | 3.9.1-r0 |
| alpine 3.24 | aom | 3.9.1-r0 |
| alpine edge | aom | 3.9.1-r0 |
| debian 11 | aom | 1.0.0.errata1-3+deb11u2 |
| debian 12 | aom | 3.6.0-1+deb12u1 |
| debian 13 | aom | 3.8.2-3 |
| debian 14 | aom | 3.8.2-3 |
| echo | aom | 3.6.0-1+deb12u1 |
| rapidfort alma 8 | firefox | pas de correctif indiqué |
| rapidfort alma 8 | thunderbird | pas de correctif indiqué |
| rapidfort alma 9 | firefox | pas de correctif indiqué |
| rapidfort alma 9 | firefox-x11 | pas de correctif indiqué |
| rapidfort alma 9 | thunderbird | pas de correctif indiqué |
| rapidfort fedora 41 | aom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | libaom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | rf-aom | 0:3.9.0-4.fc41 |
| rapidfort fedora 41 | rf-libaom | 0:3.9.0-4.fc41 |
| rapidfort Oracle Linux 9 | firefox | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | firefox-x11 | pas de correctif indiqué |
| rapidfort Oracle Linux 9 | thunderbird | pas de correctif indiqué |
| rapidfort rocky 8 | firefox | pas de correctif indiqué |
| rapidfort rocky 8 | thunderbird | pas de correctif indiqué |
| rapidfort rocky 9 | firefox | pas de correctif indiqué |
| rapidfort rocky 9 | firefox-x11 | pas de correctif indiqué |
| rapidfort rocky 9 | thunderbird | pas de correctif indiqué |
| Red Hat | firefox | pas de correctif indiqué |
| Red Hat | firefox-x11 | pas de correctif indiqué |
| Red Hat | firefox:flatpak::firefox | pas de correctif indiqué |
| Red Hat | firefox:flatpak::firefox-x11 | pas de correctif indiqué |
| Red Hat | thunderbird | pas de correctif indiqué |
| Red Hat | thunderbird:flatpak::thunderbird | pas de correctif indiqué |
| root.io debian 11 | rootio-aom | 1.0.0.errata1-3+deb11u2 |
| root.io debian 12 | rootio-aom | 3.6.0-1+deb12u1 |
| ubuntu 20.04 | aom | 1.0.0.errata1-3+deb11u1ubuntu0.1 |
| ubuntu 20.04-ESM | aom | 1.0.0.errata1-3+deb11u1ubuntu0.1 |
| ubuntu 22.04 | aom | 3.3.0-1ubuntu0.1 |
| ubuntu 24.04 | aom | 3.8.2-2ubuntu0.1 |
| ubuntu 24.10 | aom | 3.8.2-2ubuntu1 |
Références
- https://access.redhat.com/security/cve/CVE-2024-5171
- https://issues.chromium.org/issues/332382766
- https://lists.debian.org/debian-lts-announce/2024/09/msg00024.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HYUEHZ35ZPY2EONVZCGO6LPT3AMLZCP/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U5NRNCEYS246CYGOR32MF7OGKWOWER22/
- https://nvd.nist.gov/vuln/detail/CVE-2024-5171
- https://ubuntu.com/security/notices/USN-6815-1
- https://ubuntu.com/security/notices/USN-7397-1