Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-15395

Опубликовано: 30 июн. 2020
Источник: debian
EPSS Низкий

Описание

In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
libmediainfofixed20.09+dfsg-1package
libmediainfono-dsabusterpackage
libmediainfono-dsajessiepackage

Примечания

  • https://sourceforge.net/p/mediainfo/bugs/1127/

  • https://github.com/MediaArea/MediaInfoLib/commit/5b998282f47f080592d298a25c642f13a895c4dc

EPSS

Процентиль: 65%
0.01083
Низкий

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 6 лет назад

In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).

CVSS3: 7.8
nvd
больше 6 лет назад

In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).

CVSS3: 7.8
github
больше 4 лет назад

In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing).

CVSS3: 7.8
altlinux
около 6 лет назад

ALT-PU-2020-2638: package `mediainfo` update to version 20.08-alt1

EPSS

Процентиль: 65%
0.01083
Низкий