PT-2022-6790

CVE-2022-1923

·

تاريخ النشر

2022-05-18

·

تاريخ التحديث

2026-10-14

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Gstreamer (affected versions not specified)
Description The issue is related to an integer overflow in the matroskademux element in the bzip decompression function, which can cause a segfault or potentially a heap overwrite, depending on the libc used and the underlying OS capabilities. This could allow an attacker to access confidential data, compromise its integrity, and cause a denial of service using a specially crafted file.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALSA-2023:2260
ALT-PU-2022-2059
ALT-PU-2022-2898
CLEANSTART-2026-QO62654
DLA-3069-1
DSA-5204-1
MGASA-2022-0322
MGASA-2023-0354
OESA-2022-1736
OPENSUSE-SU-2022_2957-1
OPENSUSE-SU-2022_3908-1
RHSA-2023:2260
RHSA-2023_2260
ROSA-SA-2024-2462
SUSE-SU-2022:2911-1
SUSE-SU-2022:2957-1
SUSE-SU-2022:3906-1
SUSE-SU-2022:3908-1
SUSE-SU-2023:3688-1
USN-5555-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾