Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-3813
HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3813

2022-11-0100:00:00
ubuntu.com
ubuntu.com
17
axiomatic bento4
memory leak
mp4edit
remote attack
cve-2022-3813
vulnerability
public disclosure

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.8%

A vulnerability classified as problematic has been found in Axiomatic
Bento4. This affects an unknown part of the component mp4edit. The
manipulation leads to memory leak. It is possible to initiate the attack
remotely. The exploit has been disclosed to the public and may be used. The
associated identifier of this vulnerability is VDB-212679.

Notes

Author Note
alexmurray kodi-inputstream-adaptive contains an embedded copy of bento4

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

46.8%

Related for UB:CVE-2022-3813