Lucene search

K
redosRedosROS-20240902-17
HistorySep 02, 2024 - 12:00 a.m.

ROS-20240902-17

2024-09-0200:00:00
redos.red-soft.ru
25
vulnerability
gstreamer orc
stack-based buffer overflow
denial of service
unix

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

A vulnerability in the orcparse.c file in the library for compiling and executing programs that work with GStreamer ORC data arrays is related to a stack-based buffer overflow.
GStreamer ORC data arrays is related to a stack-based buffer overflow. Exploitation of the vulnerability
could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64orc< 0.4.39-12UNKNOWN

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

Low