Lucene search

VulDBCVE-2022-3807

HistoryNov 01, 2022 - 8:15 p.m.

CVE-2022-3807

2022-11-0120:15:22

CWE-252

CWE-404

VulDB

web.nvd.nist.gov

axiomatic bento4

cve-2022-3807

incomplete fix

cve-2019-13238

vdb-212660

resource consumption

remote attack

public disclosure

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660.

Affected configurations

Nvd

Node

axiosysbento4Match-

VendorProductVersionCPE
axiosysbento4-cpe:2.3:a:axiosys:bento4:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axiosys	bento4	-	cpe:2.3:a:axiosys:bento4:-:::::::*

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip

github.com/axiomatic-systems/Bento4/issues/803

vuldb.com/?id.212660

Social References

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

Related for CVE-2022-3807