Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-6063
HistoryJun 17, 2024 - 12:00 a.m.

CVE-2024-6063

2024-06-1700:00:00
ubuntu.com
ubuntu.com
3
gpac mp4box vulnerability
null pointer dereference
local attack
patch 8767ed0a77c4b02287db3723e92c2169f67c85d5

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS4

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has
been classified as problematic. This affects the function m2tsdmx_on_event
of the file src/filters/dmx_m2ts.c of the component MP4Box. The
manipulation leads to null pointer dereference. An attack has to be
approached locally. The exploit has been disclosed to the public and may be
used. The patch is named 8767ed0a77c4b02287db3723e92c2169f67c85d5. It is
recommended to apply a patch to fix this issue. The associated identifier
of this vulnerability is VDB-268791.

Bugs

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS4

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/SC:N/VI:N/SI:N/VA:L/SA:N

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

5.1%