Lucene search

VulDBCVELIST:CVE-2022-3807

HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3807 Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption

2022-11-0100:00:00

CWE-404

VulDB

www.cve.org

axiomatic bento4

incomplete fix

vulnerability

resource consumption

remote attack

disclosure

vdb-212660

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212660.

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip

github.com/axiomatic-systems/Bento4/issues/803

vuldb.com/?id.212660

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

60.4%

JSON

Related for CVELIST:CVE-2022-3807