Security Update for libxvmc
Summary
DLA-671-1: libxvmc - security update. Affects libxvmc versions < 2:1.0.7-1+deb7u3. Fixed in 2:1.0.7-1+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libxvmc is a library in the Debian 7 Wheezy ecosystem that provides X Video Motion Compensation extension support for X.Org. It allows applications to offload video decoding to the GPU. This library is vulnerable to a security issue that could result in buffer underrun if an empty string is received from an x-server.
Vulnerability Detail
The vulnerability, identified as CVE-2016-7953, occurs when the buffer is accessed unconditionally with the value of "rep.nameLen - 1", which could be -1 if an empty string is received. This could lead to a buffer underrun, potentially causing a crash or enabling an attacker to execute arbitrary code.
How To Fix
Minimum fixed version
2:1.0.7-1+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libxvmcTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, libxvmc in Debian 7 Wheezy is vulnerable to a buffer underrun issue. To mitigate this vulnerability, it is crucial to upgrade the libxvmc package to version 2:1.0.7-1+deb7u3 or later. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for libxvmc →
FAQ
libxvmc is a library in the Debian 7 Wheezy ecosystem that provides X Video Motion Compensation extension support for X.Org.
The vulnerability could result in a buffer underrun, potentially causing a crash or enabling an attacker to execute arbitrary code.
To fix this vulnerability, you need to upgrade the libxvmc package to version 2:1.0.7-1+deb7u3 or later.
No workaround has been provided for this vulnerability.
You can find more information about Debian LTS security advisories, how to apply updates, and frequently asked questions at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for libxvmc.
