CVE-2023-3291

2023-06-1602:15:08

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-3291

buffer overflow

github

gpac

unix

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

0.0004 Low

EPSS

Percentile

15.7%

JSON

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.

OSVersionArchitecturePackageVersionFilename
Debian11allgpac< 1.0.1+dfsg1-4+deb11u3gpac_1.0.1+dfsg1-4+deb11u3_all.deb
Debian10allgpac<= 0.5.2-426-gc5ad4e4+dfsg5-5gpac_0.5.2-426-gc5ad4e4+dfsg5-5_all.deb
Debian999allgpac<= 2.2.1+dfsg1-3.1gpac_2.2.1+dfsg1-3.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	gpac	< 1.0.1+dfsg1-4+deb11u3	gpac_1.0.1+dfsg1-4+deb11u3_all.deb
Debian	10	all	gpac	<= 0.5.2-426-gc5ad4e4+dfsg5-5	gpac_0.5.2-426-gc5ad4e4+dfsg5-5_all.deb
Debian	999	all	gpac	<= 2.2.1+dfsg1-3.1	gpac_2.2.1+dfsg1-3.1_all.deb