CVE-2022-3222 - OpenCVE

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Gpac	Gpac

Configuration 1 [-]

OR	cpe:2.3:a:gpac:gpac::::::::
	cpe:2.3:a:gpac:gpac:2.1:dev::::::

References

Link	Resource
https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf	Patch Third Party Advisory
https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235	Exploit Patch Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: @huntrdev

Published: 2022-09-15T00:00:00

Updated: 2023-05-27T00:00:00

Reserved: 2022-09-15T00:00:00

Link: CVE-2022-3222

JSON object: View

NVD Information

Status : Modified

Published: 2022-09-15T09:15:09.723

Modified: 2023-05-27T04:15:22.017

Link: CVE-2022-3222

JSON object: View

Redhat Information

No data.

CWE

CWE-674

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D5313BE-5EA3-458F-B779-5A941BBCBD55", "versionEndExcluding": "2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:gpac:gpac:2.1:dev:*:*:*:*:*:*", "matchCriteriaId": "2963671B-FA29-45DB-80B0-92F9E55F5159", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV."}, {"lang": "es", "value": "Una Recursi\u00f3n no Controlada en el repositorio de GitHub gpac/gpac versiones anteriores a 2.1.0-DEV"}], "id": "CVE-2022-3222", "lastModified": "2023-05-27T04:15:22.017", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-15T09:15:09.723", "references": [{"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf"}, {"source": "security@huntr.dev", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235"}, {"source": "security@huntr.dev", "url": "https://www.debian.org/security/2023/dsa-5411"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "security@huntr.dev", "type": "Primary"}]}