Lucene search

K
redosRedosROS-20240807-06
HistoryAug 07, 2024 - 12:00 a.m.

ROS-20240807-06

2024-08-0700:00:00
redos.red-soft.ru
2
gpac
multimedia platform
vulnerabilities
remote attackers
denial of service
web page structure
memory leak
av1 parser

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

Vulnerability in the gf_avc_change_vui() function of the GPAC multimedia platform, related to the failure to take measures to
to protect the structure of the web page. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

Vulnerability in the av1_uvlc() function of the GPAC multimedia platform, related to an infinite loop in the function
av1_uvlc in media_tools/av_parsers.c. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

Vulnerability in the gf_isom_add_chapter() function of the GPAC multimedia platform, related to a memory leak in the
gf_isom_isom_add_chapter function in /isomedia/isom_write.c. Exploitation of the vulnerability could allow an attacker to
cause a denial of service using a crafted MP4 file

Vulnerability in the GPAC multimedia platform, related to failure to take measures to protect the structure of a web page.
Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

Vulnerability in GPAC multimedia platform, related to reading outside of clipboard in repository
GitHub gpac/gpac. Exploitation of the vulnerability could allow an attacker acting remotely to cause a
denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gpac< 2.3.0-2.20240126gitf30e0d1UNKNOWN

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low