CVE-2024-5197

一、漏洞信息
 漏洞编号：[CVE-2024-5197](https://nvd.nist.gov/vuln/detail/CVE-2024-5197)
 漏洞归属组件：[libvpx](https://gitee.com/src-openeuler/libvpx)
 漏洞归属的版本：1.12.0,1.13.1,1.7.0
 CVSS V2.0分值：
  BaseScore：0.0 Low
  Vector：CVSS：2.0/
 漏洞简述：
  There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
 漏洞公开时间：2024-06-03 22:15:09
 漏洞创建时间：2024-06-04 03:18:30
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2024-5197
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| cve-coordination.google.com | https://g-issues.chromium.org/issues/332382766 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-5197 | https://bugzilla.suse.com/show_bug.cgi?id=1225879 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2024-5197 | https://bugzilla.suse.com/show_bug.cgi?id=1225879 |
| suse_bugzilla | https://g-issues.chromium.org/issues/332382766 | https://bugzilla.suse.com/show_bug.cgi?id=1225879 |
| redhat_bugzilla | https://g-issues.chromium.org/issues/332382766 | https://bugzilla.redhat.com/show_bug.cgi?id=2291198 |
| redhat_bugzilla | https://chromium.googlesource.com/webm/libvpx/+/74c70af01667733483dc69298b8921779f5f6ff3 | https://bugzilla.redhat.com/show_bug.cgi?id=2291198 |
| ubuntu | https://www.cve.org/CVERecord?id=CVE-2024-5197 | https://ubuntu.com/security/CVE-2024-5197 |
| ubuntu | https://ubuntu.com/security/notices/USN-6814-1 | https://ubuntu.com/security/CVE-2024-5197 |
| ubuntu | https://nvd.nist.gov/vuln/detail/CVE-2024-5197 | https://ubuntu.com/security/CVE-2024-5197 |
| ubuntu | https://launchpad.net/bugs/cve/CVE-2024-5197 | https://ubuntu.com/security/CVE-2024-5197 |
| ubuntu | https://security-tracker.debian.org/tracker/CVE-2024-5197 | https://ubuntu.com/security/CVE-2024-5197 |
| ubuntu | https://issues.chromium.org/issues/332382766 | https://ubuntu.com/security/CVE-2024-5197 |
| debian |  | https://security-tracker.debian.org/tracker/CVE-2024-5197 |
| cve_search |  | https://g-issues.chromium.org/issues/332382766 |
| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2024-5197 | https://explore.alas.aws.amazon.com/CVE-2024-5197.html |
| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5197 | https://explore.alas.aws.amazon.com/CVE-2024-5197.html |
| ubuntu | https://g-issues.chromium.org/issues/332382766 | https://ubuntu.com/security/CVE-2024-5197 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5446333 |  | ubuntu |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5446418 |  | ubuntu |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5449900 |  | ubuntu |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5553045 |  | ubuntu |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5555762 |  | ubuntu |
| libvpx |  | https://chromium-review.googlesource.com/c/webm/libvpx/+/5555763 |  | ubuntu |
| libvpx |  | https://github.com/webmproject/libvpx/commit/c5640e3300690705c336966e2a8bb346a388c829 |  | ubuntu |
| libvpx |  | https://github.com/webmproject/libvpx/commit/9d7054c0cb83665a74cf6f59b6261f455e692149 |  | ubuntu |
| libvpx |  | https://github.com/webmproject/libvpx/commit/61c4d556bd03b97d84e3fa49180d14bde5a62baa |  | ubuntu |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
    在 1.14.1 版本之前的 libvpx 中存在整数溢出漏洞。当使用 vpx_img_alloc() 函数并传递较大的 d_w、d_h 或 align 参数时，可能会导致在计算缓冲区大小和偏移量时发生整数溢出，从而使返回的 vpx_image_t 结构中的某些字段无效。同样地，当使用 vpx_img_wrap() 函数并传递较大的 d_w、d_h 或 stride_align 参数时，也可能会导致在计算缓冲区大小和偏移量时发生整数溢出，导致返回的 vpx_image_t 结构中的某些字段无效。 
 openEuler评分：
  7.8
 Vector：CVSS：2.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
 受影响版本排查(受影响/不受影响)：
  1.master(1.13.1):受影响
2.openEuler-20.03-LTS-SP4(1.7.0):受影响
3.openEuler-22.03-LTS-Next(1.7.0):受影响
4.openEuler-22.03-LTS-SP1(1.7.0):受影响
5.openEuler-22.03-LTS-SP3(1.7.0):受影响
6.openEuler-22.03-LTS-SP4(1.7.0):受影响
7.openEuler-24.03-LTS(1.13.1):受影响
8.openEuler-24.03-LTS-Next(1.13.1):受影响

修复是否涉及abi变化(是/否)：
  1.master(1.13.1):否
2.openEuler-20.03-LTS-SP4(1.7.0):否
3.openEuler-22.03-LTS-Next(1.7.0):否
4.openEuler-22.03-LTS-SP1(1.7.0):否
5.openEuler-22.03-LTS-SP3(1.7.0):否
6.openEuler-22.03-LTS-SP4(1.7.0):否
7.openEuler-24.03-LTS(1.13.1):否
8.openEuler-24.03-LTS-Next(1.13.1):否

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2024-1716

src-openEuler/libvpx
关闭

内容风险标识

评论 (14)

src-openEuler/libvpx关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2024-5197

评论 (14)

搜索帮助

src-openEuler/libvpx
关闭