PT-2018-1891 · Google+2 · Libvpx+3

Publicado 2018-01-12 · Atualizado 2024-06-15 · CVE-2017-13194

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 8.1

Description A vulnerability in the Android media framework (libvpx) is related to incorrect frame width handling. This issue may allow a remote attacker to cause a denial of service and potentially execute arbitrary code.

Recommendations For Android versions 7.0 through 8.1, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2018-01495

CVE-2017-13194

DLA-1290-1

DSA-4132-1

MGASA-2018-0112

OPENSUSE-SU-2024:11010-1

SUSE-SU-2018:0181-1

SUSE-SU-2018_0181-1

USN-4199-1

USN-4199-2

Produtos afetados

Android

Suse

Ubuntu

Libvpx

Referências · 39

• https://ubuntu.com/security/CVE-2019-9232 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2018/suse-su-20180181-1 · Nota
• https://osv.dev/vulnerability/USN-4199-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-13194 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/K7IIUY6YMQMZRGUJWQTDO45UHYP4222K · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:0181-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-13194 · Aviso do Fabricante
• https://usn.ubuntu.com/4199-2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13194 · Nota de Segurança
• https://source.android.com/security/bulletin/pixel/2018-01-01 · Aviso do Fabricante
• https://bugzilla.suse.com/1075992 · Nota
• https://ubuntu.com/security/notices/USN-4199-2 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4199-2 · Aviso do Fabricante
• https://android.googlesource.com/platform/external/libvpx/+/55cd1dd7c8d0a3de907d22e0f12718733f4e41d9 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=22463 · Nota