Veracode Vulnerability DatabaseVERACODE:25961Denial Of Service (DoS)
EPSS
Percentile
82.9%
libvpx.so is vulnerable to denial of service (DoS). The vulnerability exists because of lack of proper validation of input parameters in mkvparser.cc, leading to a resource consumption and application crash.
References
lists.opensuse.org/opensuse-security-announce/2020-01/msg00049.html
www.openwall.com/lists/oss-security/2019/10/25/17
www.openwall.com/lists/oss-security/2019/10/27/1
www.openwall.com/lists/oss-security/2019/11/07/1
lists.fedoraproject.org/archives/list/[email protected]/message/DQSTK442ATWJOR4TU3MR6C3N5A6NDFFN/
lists.fedoraproject.org/archives/list/[email protected]/message/U2IIA3RSYABBUCFIHXIRVUT5CTJVWWZ6/
seclists.org/bugtraq/2019/Nov/43
security.gentoo.org/glsa/202003-59
source.android.com/security/bulletin/android-10
usn.ubuntu.com/4199-1/
www.debian.org/security/2019/dsa-4578
Related
