Lucene search

MitreCVE-2022-43152

HistoryOct 31, 2022 - 7:15 p.m.

CVE-2022-43152

2022-10-3119:15:10

CWE-787

mitre

web.nvd.nist.gov

cve-2022-43152

tsmuxer

heap overflow

bitstreamwriter

flushbits

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

30.1%

JSON

tsMuxer v2.6.16 was discovered to contain a heap overflow via the function BitStreamWriter::flushBits() at /tsMuxer/bitStream.h.

Affected configurations

Nvd

Node

tsmuxer_projecttsmuxerMatch2.6.16

VendorProductVersionCPE
tsmuxer_projecttsmuxer2.6.16cpe:2.3:a:tsmuxer_project:tsmuxer:2.6.16:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tsmuxer_project	tsmuxer	2.6.16	cpe:2.3:a:tsmuxer_project:tsmuxer:2.6.16:::::::*

References

github.com/justdan96/tsMuxer/issues/641

Social References

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

30.1%

JSON

Related for CVE-2022-43152