Lucene search
Gentoo FoundationMGASA-2024-0027HistoryFeb 09, 2024 - 4:34 a.m.
Updated gpac packages fix security vulnerabilities
2024-02-0904:34:03
Gentoo Foundation
advisories.mageia.org
10
gpac packages
security vulnerabilities
cve-2023-3012
cve-2023-3291
unix
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
This update fixes two security vulnerabilities, CVE-2023-3012 and CVE-2023-3291, see the References below.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | gpac | < 2.2.1-1.1 | gpac-2.2.1-1.1.mga9.tainted |
References
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0027)
2024-02-09 00:00:00
Debian: Security Advisory (DSA-5452-1)
2023-07-17 00:00:00
Tenable Nessus Agent Multiple Vulnerabilities (TNS-2024-09)
2024-05-21 00:00:00
osv
osv
gpac - security update
2023-07-14 00:00:00
CVE-2023-3012
2023-05-31 14:15:11
CVE-2023-3291
2023-06-16 02:15:08
nessus
nessus
Debian DSA-5452-1 : gpac - security update
2023-07-15 00:00:00
debian
debian
[SECURITY] [DSA 5452-1] gpac security update
2023-07-14 18:47:04
huntr
huntr
NULL Pointer Dereference in function xml_sax_append_string
2023-05-26 09:13:06
heap-buffer-overflow in function id3dmx_flush filters/reframe_mp3.c
2023-06-13 09:33:01
nvd
nvd
CVE-2023-3012
2023-05-31 14:15:11
CVE-2023-3291
2023-06-16 02:15:08
veracode
veracode
NULL Pointer Dereference
2023-06-14 12:32:46
Heap Buffer Overflow
2023-06-26 10:52:47
ubuntucve
ubuntucve
CVE-2023-3012
2023-05-31 00:00:00
CVE-2023-3291
2023-06-16 00:00:00
cvelist
cvelist
CVE-2023-3012 NULL Pointer Dereference in gpac/gpac
2023-05-31 00:00:00
CVE-2023-3291 Heap-based Buffer Overflow in gpac/gpac
2023-06-16 00:00:00
debiancve
debiancve
CVE-2023-3012
2023-05-31 14:15:11
CVE-2023-3291
2023-06-16 02:15:08
cve
cve
CVE-2023-3012
2023-05-31 14:15:11
CVE-2023-3291
2023-06-16 02:15:08
prion
prion
Null pointer dereference
2023-05-31 14:15:00
Heap overflow
2023-06-16 02:15:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
6.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Related for MGASA-2024-0027