Lucene search

K
redosRedosROS-20240402-11
HistoryApr 02, 2024 - 12:00 a.m.

ROS-20240402-11

2024-04-0200:00:00
redos.red-soft.ru
9
gpac multimedia platform
vulnerability
denial of service
memory release
remote attacker

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

A vulnerability in the Extract_attributes component of media_tools/m3u8.c:329 of the GPAC multimedia platform is related to a
with a lack of memory release after an effective lifetime. Exploitation of the vulnerability could
Allow an attacker acting remotely to cause a denial of service

A vulnerability in the gf_mpd_parse_string media_tools/mpd.c:75 component of the GPAC multimedia platform is related to a lack of memory release after an effective lifetime.
A lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow
an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gpac<= 2.3.0-2.20240126gitf30e0d1UNKNOWN

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%