Lucene search

K
redosRedosROS-20240718-04
HistoryJul 18, 2024 - 12:00 a.m.

ROS-20240718-04

2024-07-1800:00:00
redos.red-soft.ru
7
vulnerability
libvpx
remote code execution
denial of service

CVSS4

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

AI Score

7.4

Confidence

High

A vulnerability in the vpx_img_alloc() function of the libvpx video encoding/decoding library is related to an
integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely,
execute arbitrary code by transmitting specially crafted data

A vulnerability in the libvpx video encoding/decoding library is related to a heap buffer overflow.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64libvpx< 1.10.0-2UNKNOWN

CVSS4

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

AI Score

7.4

Confidence

High