ISHACK AI BOT

Gentoo Linux: CVE-2022-47658: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039 Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47658 CVE - 2022-47658 202408-21

Gentoo Linux: CVE-2022-47088: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow. Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47088 CVE - 2022-47088 202408-21

Gentoo Linux: CVE-2022-47654: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261 Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47654 CVE - 2022-47654 202408-21

Gentoo Linux: CVE-2022-47087: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47087 CVE - 2022-47087 202408-21

Gentoo Linux: CVE-2022-47653: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113 Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47653 CVE - 2022-47653 202408-21

Ubuntu: USN-6697-1 (CVE-2022-3715): Bash vulnerability Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 01/05/2023 Created 03/20/2024 Added 03/19/2024 Modified 01/28/2025 Description A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems. Solution(s) ubuntu-upgrade-bash References https://attackerkb.com/topics/cve-2022-3715 CVE - 2022-3715 USN-6697-1

Debian: CVE-2022-47660: gpac -- security update Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 05/29/2023 Added 05/29/2023 Modified 01/28/2025 Description GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c Solution(s) debian-upgrade-gpac References https://attackerkb.com/topics/cve-2022-47660 CVE - 2022-47660 DSA-5411 DSA-5411-1

Debian: CVE-2022-3715: bash -- security update Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 01/05/2023 Created 07/31/2024 Added 07/30/2024 Modified 01/28/2025 Description A flaw was found in the bash package, where a heap-buffer overflow can occur in valid parameter_transform. This issue may lead to memory problems. Solution(s) debian-upgrade-bash References https://attackerkb.com/topics/cve-2022-3715 CVE - 2022-3715

Alpine Linux: CVE-2022-47655: Out-of-bounds Write Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/23/2024 Added 08/22/2024 Modified 10/02/2024 Description Libde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback<unsigned short> Solution(s) alpine-linux-upgrade-libde265 References https://attackerkb.com/topics/cve-2022-47655 CVE - 2022-47655 https://security.alpinelinux.org/vuln/CVE-2022-47655

CentOS Linux: CVE-2022-4378: Important: kernel security and bug fix update (Multiple Advisories) Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 01/05/2023 Created 03/02/2023 Added 03/01/2023 Modified 01/28/2025 Description A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. Solution(s) centos-upgrade-kernel centos-upgrade-kernel-rt centos-upgrade-kpatch-patch-3_10_0-1160_76_1 centos-upgrade-kpatch-patch-3_10_0-1160_76_1-debuginfo centos-upgrade-kpatch-patch-3_10_0-1160_80_1 centos-upgrade-kpatch-patch-3_10_0-1160_80_1-debuginfo centos-upgrade-kpatch-patch-3_10_0-1160_81_1 centos-upgrade-kpatch-patch-3_10_0-1160_81_1-debuginfo centos-upgrade-kpatch-patch-3_10_0-1160_83_1 centos-upgrade-kpatch-patch-3_10_0-1160_83_1-debuginfo References CVE-2022-4378

Red Hat: CVE-2022-4378: stack overflow in do_proc_dointvec and proc_skip_spaces (Multiple Advisories) Severity 7 CVSS (AV:L/AC:L/Au:S/C:C/I:C/A:C) Published 01/05/2023 Created 03/02/2023 Added 03/01/2023 Modified 01/30/2025 Description A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system. Solution(s) redhat-upgrade-kernel redhat-upgrade-kernel-rt References CVE-2022-4378 RHSA-2023:0951 RHSA-2023:0979 RHSA-2023:1008 RHSA-2023:1091 RHSA-2023:1092 RHSA-2023:1101 RHSA-2023:1202 RHSA-2023:1203 RHSA-2023:1220 RHSA-2023:1221 RHSA-2023:1251 RHSA-2023:1435 RHSA-2023:1566 RHSA-2023:1584 RHSA-2023:1659 RHSA-2023:3388 RHSA-2023:3431 View more

OS X update for AMD (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

Gentoo Linux: CVE-2022-47657: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662 Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47657 CVE - 2022-47657 202408-21

Gentoo Linux: CVE-2022-47663: GPAC: Multiple Vulnerabilities Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/05/2023 Created 08/13/2024 Added 08/12/2024 Modified 01/28/2025 Description GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 Solution(s) gentoo-linux-upgrade-media-video-gpac References https://attackerkb.com/topics/cve-2022-47663 CVE - 2022-47663 202408-21

OS X update for Calendar (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for ImageIO (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for libpthread (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for IOAcceleratorFamily (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Mail (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

Huawei EulerOS: CVE-2023-0049: vim security update Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 05/05/2023 Added 04/13/2023 Modified 01/28/2025 Description Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. Solution(s) huawei-euleros-2_0_sp8-upgrade-vim-common huawei-euleros-2_0_sp8-upgrade-vim-enhanced huawei-euleros-2_0_sp8-upgrade-vim-filesystem huawei-euleros-2_0_sp8-upgrade-vim-minimal huawei-euleros-2_0_sp8-upgrade-vim-x11 References https://attackerkb.com/topics/cve-2023-0049 CVE - 2023-0049 EulerOS-SA-2023-1613

OS X update for Find My (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

Amazon Linux AMI 2: CVE-2023-0054: Security patch for vim (ALAS-2023-1975) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 03/08/2023 Added 03/07/2023 Modified 01/28/2025 Description Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1145. Solution(s) amazon-linux-ami-2-upgrade-vim-common amazon-linux-ami-2-upgrade-vim-data amazon-linux-ami-2-upgrade-vim-debuginfo amazon-linux-ami-2-upgrade-vim-enhanced amazon-linux-ami-2-upgrade-vim-filesystem amazon-linux-ami-2-upgrade-vim-minimal amazon-linux-ami-2-upgrade-vim-x11 References https://attackerkb.com/topics/cve-2023-0054 AL2/ALAS-2023-1975 CVE - 2023-0054

OS X update for Kernel (CVE-2023-0054) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Shortcuts (CVE-2023-0049) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)

OS X update for Shortcuts (CVE-2023-0051) Severity 7 CVSS (AV:L/AC:M/Au:N/C:C/I:C/A:C) Published 01/04/2023 Created 10/14/2024 Added 10/14/2024 Modified 01/28/2025 Description Deprecated Solution(s)