{"id":"UBUNTU-CVE-2023-39929","details":"Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.","modified":"2026-04-22T14:10:44.345760Z","published":"2024-05-16T21:15:00Z","upstream":["CVE-2023-39929"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-39929"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2023-39929"},{"type":"REPORT","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html"}],"affected":[{"package":{"name":"libva","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/libva@1.3.0-2?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1-3","1.2.1-2","1.3.0-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libva-drm1","binary_version":"1.3.0-2"},{"binary_version":"1.3.0-2","binary_name":"libva-egl1"},{"binary_version":"1.3.0-2","binary_name":"libva-glx1"},{"binary_name":"libva-tpi1","binary_version":"1.3.0-2"},{"binary_name":"libva-wayland1","binary_version":"1.3.0-2"},{"binary_name":"libva-x11-1","binary_version":"1.3.0-2"},{"binary_name":"libva1","binary_version":"1.3.0-2"},{"binary_name":"vainfo","binary_version":"1.3.0-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-39929.json"}},{"package":{"name":"libva","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/libva@1.7.0-1ubuntu0.1?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.6.0-1","1.6.1-1","1.6.2-1","1.6.2-2","1.7.0-1","1.7.0-1ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_name":"libva-drm1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"libva-egl1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"libva-glx1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"libva-tpi1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"libva-wayland1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"libva-x11-1","binary_version":"1.7.0-1ubuntu0.1"},{"binary_version":"1.7.0-1ubuntu0.1","binary_name":"libva1"},{"binary_name":"va-driver-all","binary_version":"1.7.0-1ubuntu0.1"},{"binary_name":"vainfo","binary_version":"1.7.0-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-39929.json"}},{"package":{"name":"libva","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/libva@2.1.0-3?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.3-2","2.0.0-2","2.1.0-1","2.1.0-3"],"ecosystem_specific":{"binaries":[{"binary_name":"libva-drm2","binary_version":"2.1.0-3"},{"binary_name":"libva-glx2","binary_version":"2.1.0-3"},{"binary_name":"libva-wayland2","binary_version":"2.1.0-3"},{"binary_name":"libva-x11-2","binary_version":"2.1.0-3"},{"binary_name":"libva2","binary_version":"2.1.0-3"},{"binary_name":"va-driver-all","binary_version":"2.1.0-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-39929.json"}},{"package":{"name":"libva","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libva@2.7.0-2?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.0-1","2.5.0-2","2.6.0-1","2.6.1-1","2.7.0-1","2.7.0-2"],"ecosystem_specific":{"binaries":[{"binary_name":"libva-drm2","binary_version":"2.7.0-2"},{"binary_name":"libva-glx2","binary_version":"2.7.0-2"},{"binary_name":"libva-wayland2","binary_version":"2.7.0-2"},{"binary_name":"libva-x11-2","binary_version":"2.7.0-2"},{"binary_name":"libva2","binary_version":"2.7.0-2"},{"binary_name":"va-driver-all","binary_version":"2.7.0-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-39929.json"}},{"package":{"name":"libva","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libva@2.14.0-1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12.0-2","2.13.0-1","2.14.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"libva-drm2","binary_version":"2.14.0-1"},{"binary_name":"libva-glx2","binary_version":"2.14.0-1"},{"binary_version":"2.14.0-1","binary_name":"libva-wayland2"},{"binary_name":"libva-x11-2","binary_version":"2.14.0-1"},{"binary_name":"libva2","binary_version":"2.14.0-1"},{"binary_name":"va-driver-all","binary_version":"2.14.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-39929.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}