CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

CVE details

CVE-2022-3810

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.

Score
4.3 medium
Published
2022-11-02
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
multimedia/Bento4Bento41.6.0_3unaddressedrodrigo@FreeBSD.org

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>Bento4</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>A vulnerability was found in Axiomatic Bento4. It has been classified
	as problematic. This affects the function AP4_File::AP4_File of the
	file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to
	denial of service. It is possible to initiate the attack remotely. The
	exploit has been disclosed to the public and may be used. The
	associated identifier of this vulnerability is VDB-212667.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2022-3810</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2022-3810</url>
    </references>
    <dates>
      <discovery>2022-11-02</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>