Security Update for libde265
Summary
DLA-3699-1: libde265 - security update. Affects libde265 versions < 1.0.11-0+deb10u6. Fixed in 1.0.11-0+deb10u6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libde265 is a library for decoding video files encoded in the High Efficiency Video Coding (HEVC) format. It is commonly used in multimedia applications to provide support for HEVC video playback. This vulnerability affects libde265 version 0 and was discovered in the Debian 10 ecosystem.
Vulnerability Detail
The vulnerability, identified as CVE-2023-49465, CVE-2023-49467, and CVE-2023-49468, poses a security risk to systems utilizing libde265. It allows an attacker to execute arbitrary code or trigger a denial-of-service condition by exploiting specific flaws in the library's code. The impact of this vulnerability can range from unauthorized access to system compromise.
How To Fix
Minimum fixed version
1.0.11-0+deb10u6
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libde265Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to apply the recommended fix by updating libde265 to the latest version.
Conclusion
It is crucial to update libde265 to the latest version to mitigate the identified vulnerabilities. Failure to do so may expose systems to potential attacks and compromise their security. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libde265 →
FAQ
libde265 is a library used for decoding video files encoded in the HEVC format.
The vulnerability allows an attacker to execute arbitrary code or trigger a denial-of-service condition.
To fix this vulnerability, update libde265 to version 1.0.11-0+deb10u6 or later.
No specific workaround has been mentioned for this vulnerability.
For more information, refer to the Debian Security Advisory DLA-3699-1.
Related vulnerabilities
Recent vulnerabilities recorded for libde265.
