UBUNTU-CVE-2022-3784
Dashboard / Vulnerabilities / UBUNTU-CVE-2022-3784
Summary:
Details: A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::ReadBits of the file Ap4Mp4AudioInfo.cpp of the component mp4hls. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212563.
References: https://ubuntu.com/security/CVE-2022-3784, https://www.cve.org/CVERecord?id=CVE-2022-3784
Affected packages
Package
Name: kodi-inputstream-adaptive
Purl: pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=jammy
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -None
Affected versions
2.6.14+ds1-1
2.6.23+ds1-1
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
