Lucene search

K
redosRedosROS-20230321-01
HistoryMar 21, 2023 - 12:00 a.m.

ROS-20230321-01

2023-03-2100:00:00
redos.red-soft.ru
5

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.7%

A vulnerability in libde265 is related to null pointer dereferencing in the mc_chroma function in motion.cc.
Exploitation of the vulnerability could allow an attacker to cause a denial of service (DoS) with a
a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the function
put_unweighted_pred_16_fallback in fallback-motion.cc. Exploitation of the vulnerability could allow an attacker to
to cause a denial of service (DoS) using a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the function
ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc. Exploitation of the vulnerability could allow an attacker to
to cause a denial of service (DoS) using a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the function
ff_hevc_put_weighted_pred_avg_8_sse in sse-motion.cc . Exploitation of the vulnerability could allow an attacker to
to cause a denial of service (DoS) using a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the put_weighted_pred_8_fallback function
in fallback-motion.cc. Exploitation of the vulnerability could allow an attacker to cause a denial of service
(DoS) using a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the function
ff_hevc_put_hevc_epel_pixels_8_sse in sse-motion.cc. Exploitation of the vulnerability could allow an attacker to
to cause a denial of service (DoS) using a crafted input file.

The vulnerability in libde265 is related to the dereferencing of a null pointer in the function
ff_hevc_put_unweighted_pred_8_sse in sse-motion.cc. Exploitation of the vulnerability could allow an attacker to
to cause a denial of service (DoS) using a crafted input file.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libde265<= 1.0.11-1UNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.7%