UBUNTU-CVE-2022-4202

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2022-4202
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-4202.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2022-4202
Related
Published
2022-11-29T09:15:00Z
Modified
2024-12-18T16:43:04Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsrtranslatecoords of the file laser/lsr_dec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908. It is recommended to apply a patch to fix this issue. VDB-214518 is the identifier assigned to this vulnerability.

References

Affected packages

Ubuntu:Pro:14.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=esm-infra-legacy/trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.0+svn4288~dfsg1-1ubuntu1
0.5.0+svn4288~dfsg1-4
0.5.0+svn4288~dfsg1-4ubuntu1
0.5.0+svn4288~dfsg1-4ubuntu1+esm1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=esm-apps/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.2-426-gc5ad4e4+dfsg5-1build1
0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=esm-apps/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.2-426-gc5ad4e4+dfsg5-3
0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.5.2-426-gc5ad4e4+dfsg5-4ubuntu1
0.5.2-426-gc5ad4e4+dfsg5-5

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:22.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.0.1+dfsg1-4
1.0.1+dfsg1-5

2.*

2.0.0+dfsg1-2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.04:LTS / gpac

Package

Name
gpac
Purl
pkg:deb/ubuntu/gpac?arch=src?distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.2.1+dfsg1-3
2.2.1+dfsg1-3.1
2.2.1+dfsg1-3.1build1
2.2.1+dfsg1-3.1build2

Ecosystem specific 

{
    "ubuntu_priority": "medium"
}