ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 12
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 12
BDU:2021-03097
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ libwebp Π΄Π»Ρ ΠΊΠΎΠ΄ΠΈΡΠΎΠ²Π°Π½ΠΈΡ ΠΈ Π΄Π΅ΠΊΠΎΠ΄ΠΈΡΠΎΠ²Π°Π½ΠΈΡ ΠΈΠ·ΠΎΠ±ΡΠ°ΠΆΠ΅Π½ΠΈΠΉ Π² ΡΠΎΡΠΌΠ°ΡΠ΅ WebP, ΡΠ²ΡΠ·Π°Π½Π½Π°Ρ Ρ ΡΡΠ΅Π½ΠΈΠ΅ΠΌ Π·Π° Π³ΡΠ°Π½ΠΈΡΠ°ΠΌΠΈ Π±ΡΡΠ΅ΡΠ° Π² ΠΏΠ°ΠΌΡΡΠΈ, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ ΠΏΠΎΠ»ΡΡΠΈΡΡ Π΄ΠΎΡΡΡΠΏ ΠΊ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions before 1 ...
GHSA-3rw8-24h2-6px6
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability.
RLSA-2021:4231
Moderate: libwebp security update
ELSA-2021-4231
ELSA-2021-4231: libwebp security update (MODERATE)
SUSE-SU-2021:1830-1
Security update for libwebp
openSUSE-SU-2021:1860-1
Security update for libwebp
SUSE-SU-2021:1860-1
Security update for libwebp
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | BDU:2021-03097 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΠΈΠ±Π»ΠΈΠΎΡΠ΅ΠΊΠΈ libwebp Π΄Π»Ρ ΠΊΠΎΠ΄ΠΈΡΠΎΠ²Π°Π½ΠΈΡ ΠΈ Π΄Π΅ΠΊΠΎΠ΄ΠΈΡΠΎΠ²Π°Π½ΠΈΡ ΠΈΠ·ΠΎΠ±ΡΠ°ΠΆΠ΅Π½ΠΈΠΉ Π² ΡΠΎΡΠΌΠ°ΡΠ΅ WebP, ΡΠ²ΡΠ·Π°Π½Π½Π°Ρ Ρ ΡΡΠ΅Π½ΠΈΠ΅ΠΌ Π·Π° Π³ΡΠ°Π½ΠΈΡΠ°ΠΌΠΈ Π±ΡΡΠ΅ΡΠ° Π² ΠΏΠ°ΠΌΡΡΠΈ, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ ΠΏΠΎΠ»ΡΡΠΈΡΡ Π΄ΠΎΡΡΡΠΏ ΠΊ ΠΊΠΎΠ½ΡΠΈΠ΄Π΅Π½ΡΠΈΠ°Π»ΡΠ½ΠΎΠΉ ΠΈΠ½ΡΠΎΡΠΌΠ°ΡΠΈΠΈ | CVSS3: 4.2 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2018-25009 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2018-25009 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | ΠΎΠΊΠΎΠ»ΠΎ 8 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2018-25009 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | CVE-2018-25009 A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
| CVE-2018-25009 A heap-based buffer overflow was found in libwebp in versions before 1 ... | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
| GHSA-3rw8-24h2-6px6 A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability. | CVSS3: 9.1 | 2% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 4 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
 | RLSA-2021:4231 Moderate: libwebp security update | ΠΏΠΎΡΡΠΈ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| ELSA-2021-4231 ELSA-2021-4231: libwebp security update (MODERATE) | ΠΏΠΎΡΡΠΈ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
 | SUSE-SU-2021:1830-1 Security update for libwebp | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| openSUSE-SU-2021:1860-1 Security update for libwebp | ΠΎΠΊΠΎΠ»ΠΎ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ | ||
| SUSE-SU-2021:1860-1 Security update for libwebp | Π±ΠΎΠ»ΡΡΠ΅ 5 Π»Π΅Ρ Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ