ALT-PU-2017-2415-1

Обновление пакета x265 в ветке sisyphus

Версия2.5-alt1
Задание#190357
Опубликовано2017-10-11
Макс. серьёзностьMEDIUM
Серьёзность:

Закрытые проблемы (1)

CVE-2017-8906
MEDIUM5.5

An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding.

Опубликовано: 2017-05-11Изменено: 2025-04-20
CVSS 2.0СРЕДНЯЯ 4.3
CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P
CVSS 3.xСРЕДНЯЯ 5.5
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H