Lucene search

K
redosRedosROS-20240910-08
HistorySep 10, 2024 - 12:00 a.m.

ROS-20240910-08

2024-09-1000:00:00
redos.red-soft.ru
22
golang
gstreamer
vulnerability
resource consumption
integer overflow
denial of service
sensitive data
unauthorized access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High

Vulnerability in DecodeConfig component of Golang programming language is related to uncontrolled consumption of resources.
resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial-of-service condition.
denial of service

A vulnerability in the Gstreamer multimedia framework is related to integer overflow. Exploitation
of the vulnerability could allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service.
integrity, as well as cause a denial of service via a specially crafted file

A vulnerability in the gst_avi_demux_invert function of the Gstreamer multimedia framework is caused by an integer
overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary code

A vulnerability in the gst_matroska_demux_add_wvpk_header function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to execute arbitrary
code

A vulnerability in the gst_matroska_decompress_data function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of
denial of service

A vulnerability in the qtdemux_inflate function of the Gstreamer multimedia framework is caused by an integer overflow.
overflow. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity and availability of protected information

A vulnerability in the gst_matroska_decompress_data function of the Gstreamer multimedia framework is caused by an integer overflow.
by an integer overflow. Exploitation of the vulnerability could allow an attacker to impact the
confidentiality, integrity and availability of protected information

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64gstreamer1-plugins-good< 1.16.3-2UNKNOWN

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.9

Confidence

High