Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-28B4D6E6CE5B3F874560670327C92C70
HistoryJan 20, 2023 - 12:00 a.m.

Use After Free

2023-01-2000:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
10
issue
assimp
software vulnerability
colladaparser
memory corruption

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

68.3%

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.

Affected configurations

Vulners
Node
conanassimpMatch5.1.4
VendorProductVersionCPE
conanassimp5.1.4cpe:2.3:a:conan:assimp:5.1.4:*:*:*:*:*:*:*

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

68.3%

Related for GITLAB-28B4D6E6CE5B3F874560670327C92C70