Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-6062
HistoryJun 17, 2024 - 12:00 a.m.

CVE-2024-6062

2024-06-1700:00:00
ubuntu.com
ubuntu.com
5
gpac vulnerability
mp4box component
null pointer dereference
local exploit
public disclosure
patch identifier
vdb-268790

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS4

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and
classified as problematic. Affected by this issue is the function
swf_svg_add_iso_sample of the file src/filters/load_text.c of the component
MP4Box. The manipulation leads to null pointer dereference. The attack
needs to be approached locally. The exploit has been disclosed to the
public and may be used. The patch is identified as
31e499d310a48bd17c8b055a0bfe0fe35887a7cd. It is recommended to apply a
patch to fix this issue. VDB-268790 is the identifier assigned to this
vulnerability.

Bugs

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS4

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%