EulerOS 2.0 SP2 : opus (EulerOS-SA-2020-2377)

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data...

Freebox server DNS rebinding vulnerability

The Freebox server is a DSL modem, router, Wi-Fi hotspot, NAS 250 GB hard disk, DECT base with up to 8 connected DECT telephones as well as Digital Video Recorder-T for TNT also known as DVB and IPTV. A security vulnerability exists in Freebox Server versions prior to 4.2.3, which stems from a DN...

CentOS 7 : libvpx (RHSA-2020:3876)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3876 advisory. - A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or...

CVE-2020-24375

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

Design/Logic Flaw

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

CVE-2020-24375

The CVE describes a DNS rebinding vulnerability in the UPnP MediaServer implementation of Freebox Server prior to version 4.2.3. The affected component is Freebox Server’s UPnP MediaServer; the underlying issue is DNS rebinding that could allow an attacker on the local network to access internal ...

CVE-2020-24375

A DNS rebinding vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

libvpx: Denial of service in mediaserver

A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,...

EulerOS 2.0 SP3 : opus (EulerOS-SA-2020-2071)

According to the version of the opus package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An information disclosure vulnerability in silk/NLSFstabilize.c in libopus in Mediaserver could enable a local malicious application to access data...

CVE-2020-0346

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled which it is by default, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0346

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled which it is by default, with no additional execution privileges needed. User interaction is not needed for...

Integer overflow

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled which it is by default, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-0346

The CVE-2020-0346 entry affects Android 11 media framework/Mediaserver. The vulnerability is an out-of-bounds write caused by an integer overflow in a Mediaserver component, enabling local elevation of privilege without user interaction. Impacted version: Android 11 (Android device context). Expl...

CVE-2020-0346

In Mediaserver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if integer sanitization were not enabled which it is by default, with no additional execution privileges needed. User interaction is not needed for...

CVE-2020-24373

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

CVE-2020-24373

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

Cross site request forgery (csrf)

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

CVE-2020-24373

A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3...

CVE-2020-24373

CVE-2020-24373 affects Freebox Server's UPnP MediaServer (prior to version 4.2.3). The vulnerability is a CSRF issue in the UPnP MediaServer implementation that could be triggered by an attacker. The available connected documents confirm the affected software (Freebox Server) and vulnerable compo...

ASB-A-151644303

In clearPropValue of MediaAnalyticsItem.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation...