CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
Confidence
High
Vulnerability in DecodeConfig component of Golang programming language is related to uncontrolled consumption of resources.
resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial-of-service condition.
denial of service
A vulnerability in the Gstreamer multimedia framework is related to integer overflow. Exploitation
of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service.
integrity, as well as cause a denial of service via a specially crafted file
A vulnerability in the gst_avi_demux_invert function of the Gstreamer multimedia framework is caused by an integer
overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code
A vulnerability in the gst_matroska_demux_add_wvpk_header function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary
code
A vulnerability in the gst_matroska_decompress_data function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service
A vulnerability in the qtdemux_inflate function of the Gstreamer multimedia framework is caused by an integer overflow.
overflow. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity and availability of protected information
A vulnerability in the gst_matroska_decompress_data function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity and availability of protected information
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
redos | 7.3 | x86_64 | gstreamer1-plugins-good | < 1.16.3-2 | UNKNOWN |