Lucene search

VulDBCVELIST:CVE-2022-3817

HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3817 Axiomatic Bento4 mp4mux memory leak

2022-11-0100:00:00

CWE-404

VulDB

www.cve.org

axiomatic bento4

mp4mux

memory leak

vulnerability

remote attack

vdb-212683

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zip

github.com/axiomatic-systems/Bento4/issues/792

vuldb.com/?id.212683

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

Related for CVELIST:CVE-2022-3817