Lucene search

K
rosalinuxROSA LABROSA-SA-2024-2344
HistoryFeb 20, 2024 - 8:34 a.m.

Advisory ROSA-SA-2024-2344

2024-02-2008:34:56
ROSA LAB
abf.rosalinux.ru
5
security vulnerability
gstreamer-plugins-bad-free
rosa-server79
post-release usage error
mxf demultiplexer
code execution
application crash
fixed
yum update.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

Software: gstreamer-plugins-bad-free 0.10.23
OS: rosa-server79

package_evr_string: gstreamer-plugins-bad-free-0.10.23-24.res7

CVE-ID: CVE-2023-44446
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: A post-release usage error was detected in the MXF demultiplexer in GStreamer when processing some MXF video files. This issue could allow an attacker to cause a crash in the application and make code execution possible.
CVE-STATUS: Fixed
CVE-REV: Run yum update gstreamer-plugins-bad-free command to close it

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%