Lucene search

ROSA LABROSA-SA-2024-2423

HistoryMay 28, 2024 - 8:15 a.m.

Advisory ROSA-SA-2024-2423

2024-05-2808:15:40

ROSA LAB

abf.rosalinux.ru

libmpeg2

rosa virtualization 2.1

cve-2022-37416

memcpy

vulnerability

ittiam

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

Confidence

Low

EPSS

0.001

Percentile

34.1%

JSON

Software: libmpeg2 0.5.1
OS: ROSA Virtualization 2.1

package_evr_string: libmpeg2-0.5.1

CVE-ID: CVE-2022-37416
BDU-ID: None
CVE-Crit: N/A
CVE-DESC.: Ittiam libmpeg2 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fullx_fullx_8x8.
CVE-STATUS: Not Relevant
CVE-REV:

OSVersionArchitecturePackageVersionFilename
ROSAanynoarchlibmpeg2< 0.5.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ROSA	any	noarch	libmpeg2	< 0.5.1	UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

Confidence

Low

EPSS

0.001

Percentile

34.1%

JSON

Related for ROSA-SA-2024-2423