Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-6063
HistoryJun 17, 2024 - 12:00 a.m.

CVE-2024-6063

2024-06-1700:00:00
ubuntu.com
ubuntu.com
1
gpac mp4box vulnerability
null pointer dereference
local attack
patch 8767ed0a77c4b02287db3723e92c2169f67c85d5

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.8 Medium

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has
been classified as problematic. This affects the function m2tsdmx_on_event
of the file src/filters/dmx_m2ts.c of the component MP4Box. The
manipulation leads to null pointer dereference. An attack has to be
approached locally. The exploit has been disclosed to the public and may be
used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is
recommended to apply a patch to fix this issue. The associated identifier
of this vulnerability is VDB-268791.

Bugs

1.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.8 Medium

CVSS4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%