9.8
CVE-2019-15784
- EPSS 1.97%
- Veröffentlicht 29.08.2019 13:15:11
- Zuletzt bearbeitet 21.11.2024 04:29:27
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSecure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Srtalliance ≫ Secure Reliable Transport Version <= 1.3.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.97% | 0.779 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-129 Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00020.html
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00036.html
https://github.com/Haivision/srt/pull/811