Lucene search

K
redosRedosROS-20240408-03
HistoryApr 08, 2024 - 12:00 a.m.

ROS-20240408-03

2024-04-0800:00:00
redos.red-soft.ru
3
buffer overflow
remote attack
memory boundaries
confidentiality
integrity
availability
vulnerability
video codec
unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.5%

Vulnerability of derivate_spatial_luma_vector_prediction function of h.265 Libde265 video codec implementation is related to
with the ability to write beyond buffer boundaries in memory. Exploiting the vulnerability could allow an attacker,
acting remotely, to affect the confidentiality, integrity and availability of protected information
information

Vulnerability of derive_combined_bipredictive_merging_candidates function (motion.cc) of video codec implementation
h.265 Libde265 is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could
allow a remote attacker to affect the confidentiality, integrity, and availability of protected information.
availability of protected information

A vulnerability in the read_coding_unit (slice.cc) function of the h.265 Libde265 video codec implementation is related to an operation that exceeds the buffer boundaries in memory.
operation beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality of the video codec.
remotely, to affect confidentiality, integrity and availability of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libde265<= 1.0.14-1UNKNOWN

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

36.5%