Upstream information
Description
An out-of-bounds read in MediaInfoLib::File__Tags_Helper::Synched_Test in Tag/File__Tags.cpp in MediaInfoLib in MediaArea MediaInfo 18.12 leads to a crash.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
National Vulnerability Database | |
---|---|
Base Score | 4.3 |
Vector | AV:N/AC:M/Au:N/C:N/I:N/A:P |
Access Vector | Network |
Access Complexity | Medium |
Authentication | None |
Confidentiality Impact | None |
Integrity Impact | None |
Availability Impact | Partial |
National Vulnerability Database | |
---|---|
Base Score | 6.5 |
Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | Required |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | None |
Availability Impact | High |
CVSSv3 Version | 3 |
SUSE Security Advisories:
- openSUSE-SU-2019:1629-1, published Wed, 26 Jun 2019 21:11:17 +0200 (CEST)
- openSUSE-SU-2019:1658-1, published Thu, 27 Jun 2019 15:10:52 +0200 (CEST)
- openSUSE-SU-2019:1889-1, published Wed, 14 Aug 2019 18:18:58 +0200 (CEST)
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
SUSE Package Hub 15 SP1 |
| Patchnames: openSUSE-2019-1889 |
SUSE Package Hub 15 |
| Patchnames: openSUSE-2019-1629 openSUSE-2019-1658 |
openSUSE Leap 15.0 |
| Patchnames: openSUSE-2019-1629 |
openSUSE Tumbleweed |
| Patchnames: openSUSE Tumbleweed GA libmediainfo-devel-21.09-1.2 |
SUSE Timeline for this CVE
CVE page created: Sat Apr 20 20:43:03 2019CVE page last modified: Fri Nov 3 13:32:00 2023