Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-24752HistoryMar 01, 2023 - 3:15 p.m.
CVE-2023-24752
2023-03-0115:15:11
Debian Security Bug Tracker
security-tracker.debian.org
15
libde265 null pointer dereference
denial of service
cve-2023-24752
ff_hevc_put_hevc_epel_pixels_8_sse
crafted input file
sse-motion.cc
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.8%
libde265 v1.0.10 was discovered to contain a NULL pointer dereference in the ff_hevc_put_hevc_epel_pixels_8_sse function at sse-motion.cc. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libde265 | < 1.0.11-1 | libde265_1.0.11-1_all.deb |
| Debian | 11 | all | libde265 | < 1.0.11-0+deb11u1 | libde265_1.0.11-0+deb11u1_all.deb |
| Debian | 999 | all | libde265 | < 1.0.11-1 | libde265_1.0.11-1_all.deb |
| Debian | 13 | all | libde265 | < 1.0.11-1 | libde265_1.0.11-1_all.deb |
Related
osv
osv
CVE-2023-24752
2023-03-01 15:15:11
libde265 - security update
2023-03-04 00:00:00
libde265 vulnerabilities
2024-02-26 18:50:31
veracode
veracode
Denial Of Service (DoS)
2023-03-07 07:22:05
cvelist
cvelist
CVE-2023-24752
2023-03-01 00:00:00
prion
prion
Null pointer dereference
2023-03-01 15:15:00
ubuntucve
ubuntucve
CVE-2023-24752
2023-03-01 00:00:00
cve
cve
CVE-2023-24752
2023-03-01 15:15:11
nvd
nvd
CVE-2023-24752
2023-03-01 15:15:11
redos
redos
ROS-20230321-01
2023-03-21 00:00:00
debian
debian
[SECURITY] [DLA 3352-1] libde265 security update
2023-03-04 17:38:45
nessus
nessus
Debian DLA-3352-1 : libde265 - LTS security update
2023-03-05 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : libde265 vulnerabilities (USN-6659-1)
2024-02-27 00:00:00
GLSA-202408-20 : libde265: Multiple Vulnerabilities
2024-08-10 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3352-1)
2023-03-08 00:00:00
Ubuntu: Security Advisory (USN-6659-1)
2024-02-27 00:00:00
Mageia: Security Advisory (MGASA-2023-0093)
2023-03-28 00:00:00
ubuntu
ubuntu
libde265 vulnerabilities
2024-02-26 00:00:00
cloudfoundry
cloudfoundry
USN-6659-1: libde265 vulnerabilities | Cloud Foundry
2024-04-04 00:00:00
gentoo
gentoo
libde265: Multiple Vulnerabilities
2024-08-10 00:00:00
mageia
mageia
Updated libde265 packages fix security vulnerability
2023-03-19 01:16:28
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.8%
Related for DEBIANCVE:CVE-2023-24752