CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2022-3809

A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.

Score
4.3 medium
Published
2022-11-02
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
multimedia/Bento4Bento41.6.0_3unaddressedrodrigo@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>Bento4</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability was found in Axiomatic Bento4 and classified as
	problematic. Affected by this issue is the function ParseCommandLine
	of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The
	manipulation leads to denial of service. The attack may be launched
	remotely. The exploit has been disclosed to the public and may be
	used. VDB-212666 is the identifier assigned to this vulnerability.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2022-3809</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2022-3809</url>
    </references>
    <dates>
      <discovery>2022-11-02</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>