libwebp: heap-based buffer overflow in PutLE16()
Published May 21, 2021
9.8
CRITICALCVSS 3.1
EPSS 2.51%
Description
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
Affected products
- Vendor n/a Product Libwebp Defaultn/a
- Version libwebp 1.0.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | Libwebp | n/a |
|
Configuration 1
- < 1.0.1
Configuration 2
- 7.0
- 8.0
No data.
Red Hat Enterprise Linux 7
libwebp-0:0.3.0-10.el7_9
Fixed · RHSA-2021:2260
Red Hat Enterprise Linux 7
qt5-qtimageformats-0:5.9.7-2.el7_9
Fixed · RHSA-2021:2328
Red Hat Enterprise Linux 8
libwebp-0:1.0.0-3.el8_4
Fixed · RHSA-2021:2354
Red Hat Enterprise Linux 8.1 Extended Update Support
libwebp-0:1.0.0-4.el8_1
Fixed · RHSA-2021:2365
Red Hat Enterprise Linux 8.2 Extended Update Support
libwebp-0:1.0.0-4.el8_2
Fixed · RHSA-2021:2364
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-controller-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-operator-bundle:v1.4.6-5
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-registry-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-ui-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-migration-velero-rhel8:v1.4.6-5
Fixed · RHBA-2021:2854
Red Hat Migration Toolkit for Containers 1.4
rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4
Fixed · RHBA-2021:2854
Red Hat Enterprise Linux 7
firefox
Not affected
Red Hat Enterprise Linux 7
thunderbird
Not affected
Red Hat Enterprise Linux 8
firefox
Not affected
Red Hat Enterprise Linux 8
thunderbird
Not affected
Red Hat Enterprise Linux 9
libwebp
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 7 | libwebp-0:0.3.0-10.el7_9 | Fixed | RHSA-2021:2260 |
| Red Hat Enterprise Linux 7 | qt5-qtimageformats-0:5.9.7-2.el7_9 | Fixed | RHSA-2021:2328 |
| Red Hat Enterprise Linux 8 | libwebp-0:1.0.0-3.el8_4 | Fixed | RHSA-2021:2354 |
| Red Hat Enterprise Linux 8.1 Extended Update Support | libwebp-0:1.0.0-4.el8_1 | Fixed | RHSA-2021:2365 |
| Red Hat Enterprise Linux 8.2 Extended Update Support | libwebp-0:1.0.0-4.el8_2 | Fixed | RHSA-2021:2364 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-controller-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-log-reader-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-must-gather-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-operator-bundle:v1.4.6-5 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-registry-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-rsync-transfer-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-ui-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.4.6-3 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.4.6-5 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-migration-velero-rhel8:v1.4.6-5 | Fixed | RHBA-2021:2854 |
| Red Hat Migration Toolkit for Containers 1.4 | rhmtc/openshift-velero-plugin-rhel8:v1.4.6-4 | Fixed | RHBA-2021:2854 |
| Red Hat Enterprise Linux 7 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 7 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 8 | firefox | Not affected | n/a |
| Red Hat Enterprise Linux 8 | thunderbird | Not affected | n/a |
| Red Hat Enterprise Linux 9 | libwebp | Not affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
This issue did not affect the versions of Firefox and Thunderbird as shipped with Red Hat Enterprise Linux 7, and 8 as they embed the fixed version of libwebp.
References (7)
- https://access.redhat.com/security/cve/CVE-2018-25011 Vendor Advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119 x_refsource_MISCThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1956919 x_refsource_MISCIssue TrackingPatchRelease NotesThird Party Advisory
- https://chromium.googlesource.com/webm/libwebp/+/v1.0.1 x_refsource_MISCThird Party Advisory
- https://chromium.googlesource.com/webm/libwebp/+log/be738c6d396fa5a272c1b209be4379a7532debfe..29fb8562c60b5a919a75d904ff7366af423f8ab9?pretty=fuller&n=10000 x_refsource_MISCThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2018-25011
- https://www.cve.org/CVERecord?id=CVE-2018-25011
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2018-25011 | Vendor Advisory | |
| https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119 | x_refsource_MISCThird Party Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1956919 | x_refsource_MISCIssue TrackingPatchRelease NotesThird Party Advisory | |
| https://chromium.googlesource.com/webm/libwebp/+/v1.0.1 | x_refsource_MISCThird Party Advisory | |
| https://chromium.googlesource.com/webm/libwebp/+log/be738c6d396fa5a272c1b209be4379a7532debfe..29fb8562c60b5a919a75d904ff7366af423f8ab9?pretty=fuller&n=10000 | x_refsource_MISCThird Party Advisory | |
| https://nvd.nist.gov/vuln/detail/CVE-2018-25011 | ||
| https://www.cve.org/CVERecord?id=CVE-2018-25011 |
Change history (0)
No recorded changes yet.