Lucene search

K
redosRedosROS-20230914-08
HistorySep 14, 2023 - 12:00 a.m.

ROS-20230914-08

2023-09-1400:00:00
redos.red-soft.ru
6
gpac multimedia
vulnerabilities
integer sign overflow
null pointer dereferencing
heap buffer overflow
application crashes
mpeg12_parseseqhdr boundaries
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.7%

GPAC multimedia platform vulnerability is related to integer sign overflow in the
filters/mux_isom.c:5716:20. Exploitation of the vulnerability could allow an attacker to cause the application to crash.

The GPAC multimedia platform vulnerability is related to null pointer dereferencing in functions
utils/xml_parser.c:1038, filters/dasher.c:8146, utils/alloc.c:170, filters/dasher.c:6332,
filters/dasher.c:7389, filter_core/filter_pck.c:434. Exploitation of the vulnerability could allow an attacker to
to cause a crash or shutdown.

The GPAC media platform vulnerability is related to a heap buffer overflow in the avi_read function
media_tools/avilib.c:67. Exploitation of the vulnerability could allow an attacker to cause the application to crash.

The GPAC media platform vulnerability is related to reading outside the MPEG12_ParseSeqHdr boundaries
media_tools/mpeg2_ps.c. Exploitation of the vulnerability could allow an attacker to cause an application crash.

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gpac<= 0.7.1-5UNKNOWN

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

12.7%