Логотип exploitDog
bind:"GHSA-j6v3-2c6w-pwpm" OR bind:"CVE-2022-1923"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-j6v3-2c6w-pwpm" OR bind:"CVE-2022-1923"

Количество 13

Количество 13

github логотип

GHSA-j6v3-2c6w-pwpm

почти 3 года назад

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2022-1923

почти 3 года назад

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2022-1923

около 3 лет назад

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
EPSS: Низкий
nvd логотип

CVE-2022-1923

почти 3 года назад

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2022-1923

почти 3 года назад

DOS / potential heap overwrite in mkv demuxing using bzip decompressio ...

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2023-04783

около 3 лет назад

Уязвимость мультимедийного фреймворка Gstreamer, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:3908-1

больше 2 лет назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:3906-1

больше 2 лет назад

Security update for gstreamer-0_10-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2957-1

почти 3 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2911-1

почти 3 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
oracle-oval логотип

ELSA-2023-2260

около 2 лет назад

ELSA-2023-2260: gstreamer1-plugins-good security update (MODERATE)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:3688-1

почти 2 года назад

Security update for gstreamer-plugins-good

EPSS: Низкий
redos логотип

ROS-20240910-08

10 месяцев назад

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-j6v3-2c6w-pwpm

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
0%
Низкий
почти 3 года назад
ubuntu логотип
CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
0%
Низкий
почти 3 года назад
redhat логотип
CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in matroskademux element in bzip decompression function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite. If the libc uses mmap for large chunks, and the OS supports mmap, then it is just a segfault (because the realloc before the integer overflow will use mremap to reduce the size of the chunk, and it will start to write to unmapped memory). However, if using a libc implementation that does not use mmap, or if the OS does not support mmap while using libc, then this could result in a heap overwrite.

CVSS3: 7.8
0%
Низкий
почти 3 года назад
debian логотип
CVE-2022-1923

DOS / potential heap overwrite in mkv demuxing using bzip decompressio ...

CVSS3: 7.8
0%
Низкий
почти 3 года назад
fstec логотип
BDU:2023-04783

Уязвимость мультимедийного фреймворка Gstreamer, связанная с целочисленным переполнением, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 7.8
0%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:3908-1

Security update for gstreamer-plugins-good

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:3906-1

Security update for gstreamer-0_10-plugins-good

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:2957-1

Security update for gstreamer-plugins-good

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2911-1

Security update for gstreamer-plugins-good

почти 3 года назад
oracle-oval логотип
ELSA-2023-2260

ELSA-2023-2260: gstreamer1-plugins-good security update (MODERATE)

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:3688-1

Security update for gstreamer-plugins-good

почти 2 года назад
redos логотип
ROS-20240910-08

Множественные уязвимости gstreamer1-plugins-good

CVSS3: 7.8
10 месяцев назад

Уязвимостей на страницу