Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-36408
HistoryJan 10, 2022 - 12:00 a.m.

CVE-2021-36408

2022-01-1000:00:00
ubuntu.com
ubuntu.com
21
libde265
heap-use-after-free
vulnerability
decoding
file
dec265

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

28.1%

JSON

An issue was discovered in libde265 v1.0.8.There is a Heap-use-after-free
in intrapred.h when decoding file using dec265.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlibde265< 1.0.4-1ubuntu0.1UNKNOWN
ubuntu22.04noarchlibde265< 1.0.8-1ubuntu0.1UNKNOWN

Related

cve 1
cnvd 1
cvelist 1
prion 1
veracode 1
debiancve 1
alpinelinux 1
osv 5
nvd 1
debian 2
nessus 5
openvas 5
ubuntu 2
cloudfoundry 1
mageia 1
gentoo 1
cve
cve
CVE-2021-36408
2022-01-10 23:15:08
cnvd
cnvd
libde265 resource management error vulnerability
2022-01-13 00:00:00
cvelist
cvelist
CVE-2021-36408
2022-01-10 00:00:00
prion
prion
Heap overflow
2022-01-10 23:15:00
veracode
veracode
Use-After-Free
2022-01-12 06:36:30
debiancve
debiancve
CVE-2021-36408
2022-01-10 23:15:08
alpinelinux
alpinelinux
CVE-2021-36408
2022-01-10 23:15:08
osv
osv
CVE-2021-36408
2022-01-10 23:15:08
libde265 vulnerabilities
2024-01-30 14:17:08
libde265 - security update
2022-12-15 00:00:00
nvd
nvd
CVE-2021-36408
2022-01-10 23:15:08
debian
debian
[SECURITY] [DLA 3240-1] libde265 security update
2022-12-15 18:13:59
[SECURITY] [DSA 5346-1] libde265 security update
2023-02-10 19:38:07
nessus
nessus
Debian DLA-3240-1 : libde265 - LTS security update
2022-12-16 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : libde265 vulnerabilities (USN-6617-1)
2024-01-30 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS : libde265 vulnerabilities (USN-6627-1)
2024-02-08 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6617-1)
2024-01-31 00:00:00
Debian: Security Advisory (DLA-3240-1)
2022-12-16 00:00:00
Ubuntu: Security Advisory (USN-6627-1)
2024-02-09 00:00:00
ubuntu
ubuntu
libde265 vulnerabilities
2024-01-30 00:00:00
libde265 vulnerabilities
2024-02-08 00:00:00
cloudfoundry
cloudfoundry
USN-6627-1: libde265 vulnerabilities | Cloud Foundry
2024-02-29 00:00:00
mageia
mageia
Updated libde265 packages fix security vulnerability
2023-03-19 01:16:28
gentoo
gentoo
libde265: Multiple Vulnerabilities
2024-08-10 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

28.1%

JSON
Related for UB:CVE-2021-36408
cve1cnvd1cvelist1prion1veracode1debiancve1alpinelinux1osv5nvd1debian2nessus5openvas5ubuntu2cloudfoundry1mageia1gentoo1