PT-2022-18705 · Pexip · Pexip Infinity

Published 2022-07-17 · Updated 2022-07-21 · CVE-2022-27937

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 27.3

Description The issue allows remote attackers to trigger excessive resource consumption via H.264.

Recommendations For versions prior to 27.3, update to version 27.3 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-27937

Affected Products

Pexip Infinity

References · 5

• https://osv.dev/vulnerability/CVE-2022-27937 · Vendor Advisory
• https://docs.pexip.com/admin/security_bulletins.htm#CVE-2022-27937 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27937 · Security Note
• https://t.me/cvenotify/33247 · Telegram Post
• https://t.me/cvenotify/33501 · Telegram Post