[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2018-20659":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":29,"technologies":31,"references":33,"score":35,"epss_score":36,"epss_percentile":37,"is_kev":38,"cisa_kev_date_added":39,"cisa_kev_due_date":39,"cisa_ssvc":40,"attack_mappings":46,"exploits":99},220445,"CVE-2018-20659","EUVD-2018-13210","An issue was discovered in Bento4 1.5.1-627. The AP4_StcoAtom class in Core\u002FAp4StcoAtom.cpp has an attempted excessive memory allocation when called from AP4_AtomFactory::CreateAtomFromStream in Core\u002FAp4AtomFactory.cpp, as demonstrated by mp42hls.","2019-01-02T17:29:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":15,"accessComplexity":16,"availabilityImpact":17,"confidentialityImpact":15},"2.0",4.3,"NETWORK","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","NONE","MEDIUM","PARTIAL",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":16,"vectorString":22,"integrityImpact":15,"userInteraction":23,"attackComplexity":24,"availabilityImpact":25,"privilegesRequired":15,"confidentialityImpact":15},"UNCHANGED","3.0",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:H","REQUIRED","LOW","HIGH",true,[28],"CWE-770",[30],"cpe:2.3:a:axiosys:bento4:1.5.1-627:*:*:*:*:*:*:*",[32],"Axiosys Bento4",[34],"https:\u002F\u002Fgithub.com\u002Faxiomatic-systems\u002FBento4\u002Fissues\u002F350",0.68,0.01199,0.67972,false,null,{"timestamp":39,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":45},"no","partial","none",{},"FSU",[47,53,64,71,77,83,92],{"name":48,"source":49,"tactics":50,"technique_id":52},"Exploit Public-Facing Application","attack_vector",[51],"initial-access","T1190",{"name":54,"source":55,"cwe_ids":56,"tactics":57,"capec_ids":59,"technique_id":63},"Direct Network Flood","capec",[28],[58],"impact",[60,61,62],"CAPEC-125","CAPEC-482","CAPEC-528","T1498.001",{"name":65,"source":55,"cwe_ids":66,"tactics":67,"capec_ids":68,"technique_id":70},"Reflection Amplification",[28],[58],[69],"CAPEC-490","T1498.002",{"name":72,"source":55,"cwe_ids":73,"tactics":74,"capec_ids":75,"technique_id":76},"Endpoint Denial of Service",[28],[58],[60],"T1499",{"name":78,"source":55,"cwe_ids":79,"tactics":80,"capec_ids":81,"technique_id":82},"OS Exhaustion Flood",[28],[58],[61],"T1499.001",{"name":84,"source":55,"cwe_ids":85,"tactics":86,"capec_ids":87,"technique_id":91},"Service Exhaustion Flood",[28],[58],[88,61,89,90,62],"CAPEC-469","CAPEC-488","CAPEC-489","T1499.002",{"name":93,"source":55,"cwe_ids":94,"tactics":95,"capec_ids":96,"technique_id":98},"Application Exhaustion Flood",[28],[58],[97],"CAPEC-130","T1499.003",[100],{"link":34}]