CVE-2023-5217

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://seclists.org/fulldisclosure/2023/Oct/12 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2023/Oct/16 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/28/5 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/28/6 Mailing List Patch Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/11 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/12 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/14 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/7 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/29/9 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/30/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/30/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/30/3 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/30/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/09/30/5 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/01/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/01/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/01/5 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/02/6 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/10/03/11 Mailing List Third Party Advisory
https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2241191 Issue Tracking Third Party Advisory
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html Release Notes Vendor Advisory
https://crbug.com/1486441 Issue Tracking Permissions Required
https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 Patch
https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 Patch
https://github.com/webmproject/libvpx/releases/tag/v1.13.1 Release Notes
https://github.com/webmproject/libvpx/tags Product
https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html Mailing List
https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html Mailing List
https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ Mailing List
https://pastebin.com/TdkC4pDv Not Applicable
https://security-tracker.debian.org/tracker/CVE-2023-5217 Patch Third Party Advisory
https://security.gentoo.org/glsa/202310-04 Third Party Advisory
https://security.gentoo.org/glsa/202401-34 Third Party Advisory
https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ Third Party Advisory
https://support.apple.com/kb/HT213961 Third Party Advisory
https://support.apple.com/kb/HT213972 Third Party Advisory
https://twitter.com/maddiestone/status/1707163313711497266 Third Party Advisory
https://www.debian.org/security/2023/dsa-5508 Third Party Advisory
https://www.debian.org/security/2023/dsa-5509 Third Party Advisory
https://www.debian.org/security/2023/dsa-5510 Third Party Advisory
https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ Third Party Advisory
https://www.openwall.com/lists/oss-security/2023/09/28/5 Mailing List Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:webmproject:libvpx:*:*:*:*:*:*:*:*
OR cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:android:*:*

Configuration 2 (hide)

OR cpe:2.3:a:microsoft:edge:116.0.1938.98:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge:117.0.2045.47:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge_chromium:116.0.5845.229:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge_chromium:117.0.5938.132:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:android:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

Configuration 6 (hide)

OR cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:16.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:*
History

02 Feb 2024, 18:22

Type Values Removed Values Added
CPE cpe:2.3:a:webmproject:libvpx:1.13.1:*:*:*:*:*:*:* cpe:2.3:a:webmproject:libvpx:*:*:*:*:*:*:*:*
References () https://security.gentoo.org/glsa/202401-34 - () https://security.gentoo.org/glsa/202401-34 - Third Party Advisory

31 Jan 2024, 17:15

Type Values Removed Values Added
References
  • () https://security.gentoo.org/glsa/202401-34 -

17 Nov 2023, 18:56

Type Values Removed Values Added
CPE cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:16.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*
First Time Apple iphone Os
Apple
Apple ipad Os
References () https://support.apple.com/kb/HT213972 - () https://support.apple.com/kb/HT213972 - Third Party Advisory
References () https://support.apple.com/kb/HT213961 - () https://support.apple.com/kb/HT213961 - Third Party Advisory

15 Nov 2023, 21:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT213972 -

15 Nov 2023, 14:15

Type Values Removed Values Added
References
  • () https://support.apple.com/kb/HT213961 -

24 Oct 2023, 13:34

Type Values Removed Values Added
References (MISC) https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 - (MISC) https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 - Patch
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ - Mailing List
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/1 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/1 - Mailing List, Third Party Advisory
References (MISC) http://seclists.org/fulldisclosure/2023/Oct/12 - (MISC) http://seclists.org/fulldisclosure/2023/Oct/12 - Mailing List, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/4 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/4 - Mailing List, Third Party Advisory
References (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html - (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html - Mailing List
References (MISC) https://www.debian.org/security/2023/dsa-5510 - (MISC) https://www.debian.org/security/2023/dsa-5510 - Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/2 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/2 - Mailing List, Third Party Advisory
References (MISC) https://pastebin.com/TdkC4pDv - (MISC) https://pastebin.com/TdkC4pDv - Not Applicable
References (MISC) https://crbug.com/1486441 - Permissions Required (MISC) https://crbug.com/1486441 - Issue Tracking, Permissions Required
References (MISC) https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 - (MISC) https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 - Patch
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/11 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/11 - Mailing List, Third Party Advisory
References (MISC) https://github.com/webmproject/libvpx/tags - (MISC) https://github.com/webmproject/libvpx/tags - Product
References (MISC) https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html - (MISC) https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html - Mailing List
References (MISC) https://security-tracker.debian.org/tracker/CVE-2023-5217 - (MISC) https://security-tracker.debian.org/tracker/CVE-2023-5217 - Patch, Third Party Advisory
References (MISC) https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ - (MISC) https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ - Third Party Advisory
References (MISC) https://github.com/webmproject/libvpx/releases/tag/v1.13.1 - (MISC) https://github.com/webmproject/libvpx/releases/tag/v1.13.1 - Release Notes
References (MISC) https://security.gentoo.org/glsa/202310-04 - (MISC) https://security.gentoo.org/glsa/202310-04 - Third Party Advisory
References (MISC) https://twitter.com/maddiestone/status/1707163313711497266 - (MISC) https://twitter.com/maddiestone/status/1707163313711497266 - Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/10/03/11 - (MISC) http://www.openwall.com/lists/oss-security/2023/10/03/11 - Mailing List, Third Party Advisory
References (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html - (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html - Mailing List
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/3 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/3 - Mailing List, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/14 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/14 - Mailing List, Third Party Advisory
References (MISC) https://www.debian.org/security/2023/dsa-5508 - (MISC) https://www.debian.org/security/2023/dsa-5508 - Third Party Advisory
References (MISC) https://www.openwall.com/lists/oss-security/2023/09/28/5 - (MISC) https://www.openwall.com/lists/oss-security/2023/09/28/5 - Mailing List, Third Party Advisory
References (MISC) https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ - (MISC) https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ - Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/7 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/7 - Mailing List, Third Party Advisory
References (MISC) https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ - (MISC) https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ - Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/1 - (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/1 - Mailing List, Third Party Advisory
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ - Mailing List
References (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/2 - (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/2 - Mailing List, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/5 - (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/5 - Mailing List, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/9 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/9 - Mailing List, Third Party Advisory
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ - Mailing List
References (MISC) https://www.debian.org/security/2023/dsa-5509 - (MISC) https://www.debian.org/security/2023/dsa-5509 - Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/5 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/5 - Mailing List, Third Party Advisory
References (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2241191 - (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2241191 - Issue Tracking, Third Party Advisory
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ - Mailing List
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ - Mailing List
References (MISC) http://www.openwall.com/lists/oss-security/2023/10/02/6 - (MISC) http://www.openwall.com/lists/oss-security/2023/10/02/6 - Mailing List, Third Party Advisory
References (MISC) http://seclists.org/fulldisclosure/2023/Oct/16 - (MISC) http://seclists.org/fulldisclosure/2023/Oct/16 - Mailing List, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/12 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/12 - Mailing List, Third Party Advisory
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ - Mailing List
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ - Mailing List
CPE cpe:2.3:a:microsoft:edge_chromium:116.0.5845.229:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge_chromium:117.0.5938.132:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge:116.0.1938.98:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:edge:117.0.2045.47:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
First Time Microsoft edge
Fedoraproject fedora
Debian debian Linux
Microsoft edge Chromium
Mozilla thunderbird
Microsoft
Debian
Fedoraproject

23 Oct 2023, 04:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ -

17 Oct 2023, 05:15

Type Values Removed Values Added
References
  • (MISC) http://seclists.org/fulldisclosure/2023/Oct/16 -

09 Oct 2023, 16:15

Type Values Removed Values Added
References
  • (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html -

06 Oct 2023, 06:15

Type Values Removed Values Added
References
  • (MISC) http://seclists.org/fulldisclosure/2023/Oct/12 -

05 Oct 2023, 23:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ -

04 Oct 2023, 13:15

Type Values Removed Values Added
References
  • (MISC) https://security.gentoo.org/glsa/202310-04 -

04 Oct 2023, 00:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/10/03/11 -

02 Oct 2023, 15:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/10/02/6 -

02 Oct 2023, 03:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ -
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ -
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ -
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ -

01 Oct 2023, 22:15

Type Values Removed Values Added
References
  • (MISC) https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html -

01 Oct 2023, 21:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/5 -

01 Oct 2023, 15:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/2 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/10/01/1 -

01 Oct 2023, 07:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ -

01 Oct 2023, 03:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/5 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/4 -

30 Sep 2023, 21:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/2 -
  • (MISC) https://github.com/webmproject/libvpx/releases/tag/v1.13.1 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/3 -

30 Sep 2023, 19:15

Type Values Removed Values Added
References
  • (MISC) https://twitter.com/maddiestone/status/1707163313711497266 -
  • (MISC) https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ -

30 Sep 2023, 12:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/30/1 -
  • (MISC) https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html -

30 Sep 2023, 04:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/9 -
  • (MISC) https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ -
  • (MISC) https://github.com/webmproject/libvpx/tags -
  • (MISC) https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ -
  • (MISC) https://pastebin.com/TdkC4pDv -
  • (MISC) https://security-tracker.debian.org/tracker/CVE-2023-5217 -
  • (MISC) https://www.openwall.com/lists/oss-security/2023/09/28/5 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/14 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/11 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/12 -
  • (MISC) https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 -
  • (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2241191 -
  • (MISC) https://www.debian.org/security/2023/dsa-5508 -
  • (MISC) https://www.debian.org/security/2023/dsa-5509 -
  • (MISC) https://www.debian.org/security/2023/dsa-5510 -
  • (MISC) https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 -

29 Sep 2023, 21:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/7 -

29 Sep 2023, 18:37

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:android:*:*
cpe:2.3:a:webmproject:libvpx:1.13.1:*:*:*:*:*:*:*
CWE CWE-787
First Time Webmproject libvpx
Mozilla firefox Esr
Mozilla firefox Focus
Google chrome
Google
Mozilla firefox
Webmproject
Mozilla
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/1 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/1 - Mailing List, Third Party Advisory
References (MISC) https://crbug.com/1486441 - (MISC) https://crbug.com/1486441 - Permissions Required
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/6 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/6 - Mailing List, Patch, Third Party Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/5 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/5 - Mailing List, Patch, Third Party Advisory
References (MISC) https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html - (MISC) https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html - Release Notes, Vendor Advisory
References (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/2 - (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/2 - Mailing List, Third Party Advisory

29 Sep 2023, 15:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/1 -
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/29/2 -

29 Sep 2023, 00:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/6 -

28 Sep 2023, 21:15

Type Values Removed Values Added
References
  • (MISC) http://www.openwall.com/lists/oss-security/2023/09/28/5 -

28 Sep 2023, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-09-28 16:15

Updated : 2024-02-28 20:33

NVD link : CVE-2023-5217

Mitre link : CVE-2023-5217

CVE.ORG link : CVE-2023-5217

JSON object : View

Products Affected

mozilla

  • firefox
  • thunderbird
  • firefox_focus
  • firefox_esr

google

  • chrome

microsoft

  • edge_chromium
  • edge

apple

  • ipad_os
  • iphone_os

debian

  • debian_linux

webmproject

  • libvpx

fedoraproject

  • fedora
CWE
CWE-787

Out-of-bounds Write


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024