Lucene search

K
rosalinuxROSA LABROSA-SA-2024-2346
HistoryFeb 20, 2024 - 8:36 a.m.

Advisory ROSA-SA-2024-2346

2024-02-2008:36:43
ROSA LAB
abf.rosalinux.ru
10
gstreamer1-plugins-bad-free
mxf demultiplexer
rosa-server79
cve-2023-44446
code execution

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

Software: gstreamer1-plugins-bad-free 1.10.4
OS: rosa-server79

package_evr_string: gstreamer1-plugins-bad-free-1.10.4-4.res7

CVE-ID: CVE-2023-44446
BDU-ID: None
CVE-Crit: HIGH
CVE-DESC.: A post-release usage error was detected in the MXF demultiplexer in GStreamer when processing some MXF video files. This issue could allow an attacker to cause a crash in the application and make code execution possible.
CVE-STATUS: Fixed
CVE-REV: Run the yum update gstreamer1-plugins-bad-free command to close it

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%