Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6313.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6313-1)
Summary:	The remote host is missing an update for the 'faad2' package(s) announced via the USN-6313-1 advisory.
Description:	Summary: The remote host is missing an update for the 'faad2' package(s) announced via the USN-6313-1 advisory. Vulnerability Insight: It was discovered that FAAD2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2021-32272, CVE-2021-32273, CVE-2021-32274, CVE-2021-32277, CVE-2021-32278, CVE-2023-38857, CVE-2023-38858) It was discovered that FAAD2 incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-32276) Affected Software/OS: 'faad2' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04, Ubuntu 20.04. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-32272 Debian Security Information: DSA-5109 (Google Search) https://www.debian.org/security/2022/dsa-5109 https://github.com/knik0/faad2/commit/1b71a6ba963d131375f5e489b3b25e36f19f3f24 https://github.com/knik0/faad2/issues/57 Common Vulnerability Exposure (CVE) ID: CVE-2021-32273 https://github.com/knik0/faad2/issues/56 Common Vulnerability Exposure (CVE) ID: CVE-2021-32274 https://github.com/knik0/faad2/issues/60 https://lists.debian.org/debian-lts-announce/2021/10/msg00020.html Common Vulnerability Exposure (CVE) ID: CVE-2021-32276 https://github.com/knik0/faad2/issues/58 Common Vulnerability Exposure (CVE) ID: CVE-2021-32277 https://github.com/knik0/faad2/issues/59 Common Vulnerability Exposure (CVE) ID: CVE-2021-32278 https://github.com/knik0/faad2/issues/62 Common Vulnerability Exposure (CVE) ID: CVE-2023-38857 https://security.gentoo.org/glsa/202401-13 https://github.com/knik0/faad2/issues/171 Common Vulnerability Exposure (CVE) ID: CVE-2023-38858 https://github.com/knik0/faad2/issues/173
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.