Lucene search

[email protected]CVE-2023-5998

HistoryNov 07, 2023 - 7:15 p.m.

CVE-2023-5998

2023-11-0719:15:12

CWE-125

[email protected]

web.nvd.nist.gov

cve-2023-5998

github

gpac

out-of-bounds read

security vulnerability

nvd

2.3.0-dev

4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7.3 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

15.9%

JSON

Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.

CPENameOperatorVersion
gpac:gpacgpaclt2.3.0
gpac:gpacgpaceq-
gpac:gpacgpaceq0.7.1
gpac:gpacgpaceq1.1.0
gpac:gpacgpaceq0.5.2
gpac:gpacgpaceq2.3-dev-rev40-g3602a5ded
gpac:gpacgpaceq2.1
gpac:gpacgpaceq1.1.0-dev-rev1759-geb2d1e6dd
gpac:gpacgpaceq2.0.0
gpac:gpacgpaceq2.3-dev-rev1-g4669ba229-master

CPE	Name	Operator	Version
gpac:gpac	gpac	lt	2.3.0
gpac:gpac	gpac	eq	-
gpac:gpac	gpac	eq	0.7.1
gpac:gpac	gpac	eq	1.1.0
gpac:gpac	gpac	eq	0.5.2
gpac:gpac	gpac	eq	2.3-dev-rev40-g3602a5ded
gpac:gpac	gpac	eq	2.1
gpac:gpac	gpac	eq	1.1.0-dev-rev1759-geb2d1e6dd
gpac:gpac	gpac	eq	2.0.0
gpac:gpac	gpac	eq	2.3-dev-rev1-g4669ba229-master

Rows per page:

1-10 of 371

References

github.com/gpac/gpac/commit/db74835944548fc3bdf03121b0e012373bdebb3e

huntr.com/bounties/ea02a231-b688-422b-a881-ef415bcf6113

4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7.3 High

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

15.9%

JSON

Related for CVE-2023-5998

osv1 veracode1 debiancve1 cvelist1 ubuntucve1 prion1