Astra Linux – Vulnerability in zvbi

A vulnerability was discovered in libzvbi up to version 0.2.43. It has been classified as a problematic issue. The affected function is vbistrndupiconvucs2 in the file src/conv.c. Manipulating the srclength argument leads to an uninitialized pointer. This vulnerability can be exploited remotely...

The vulnerability of the VBI libzvbi library’s capture and decoding function, related to a numerical overflow in the bi_strndup_iconv_ucs2() function, allows attackers to trigger a service denial.

The vulnerability of the VBI libzvbi library’s capture and decoding function is related to a numerical overflow in the bistrndupiconvucs2 function. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...