Security Vulnerabilities - CVEs Published In November 2023
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box.
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.
CVSS Score
5.3
EPSS Score
0.001
Published
2023-11-01
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01
In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed
CVSS Score
5.5
EPSS Score
0.0
Published
2023-11-01