Lucene search

K
redosRedosROS-20230130-02
HistoryJan 30, 2023 - 12:00 a.m.

ROS-20230130-02

2023-01-3000:00:00
redos.red-soft.ru
4
vulnerability
opusfile
null pointer
xiph
exploitation
attacker
remote
denial of service
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

17.2%

Vulnerability of the opusfile stream decoder library is related to null pointer dereferencing in the
op_get_data and op_open1 functions in opusfile.c in xiph. Exploitation of the vulnerability could allow an attacker,
acting remotely, transfer specially crafted data to an application and perform a denial of service (DoS) attack.
denial of service (DoS) attack

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64opusfile<= 0.12-1UNKNOWN

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

17.2%