PT-2023-9309 · Gpac+1 · Gpac+1

Tmotfl · Publicado 2023-03-17 · Atualizado 2024-08-08 · CVE-2023-1452

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GPAC version 2.3-DEV-rev35-gbbca86917-master

Description A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow memory buffers. Local access is required for this attack. The issue has been publicly disclosed and may be exploited.

Recommendations To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

BDU:2024-06194

CVE-2023-1452

DSA-5411-1

Produtos afetados

Gpac

Red Os

Referências · 20

• 🔥 https://github.com/gpac/gpac/issues/2386 · Exploit
• 🔥 https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4 · Exploit
• https://github.com/gpac/gpac/commit/a5efec8187de02d1f0a412140b0bf030a6747d3f · Nota
• https://github.com/gpac/gpac/commit/6d6c4533ca7004f76d524129b52bda241dc231b5 · Nota
• https://ubuntu.com/security/CVE-2023-1452 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-1452 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2023-1452 · Nota de Segurança
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-gpac-08-08-24 · Nota
• https://vuldb.com/?ctiid.223297 · Nota
• https://osv.dev/vulnerability/CVE-2023-1452 · Aviso do Fabricante
• https://t.me/cibsecurity/60225 · Publicação no Telegram
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-1452 · Aviso do Fabricante
• https://osv.dev/vulnerability/DSA-5411-1 · Aviso do Fabricante
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1452 · Aviso do Fabricante