Source: zabbix X-Debbugs-CC: [email protected] Severity: important Tags: security
Hi, The following vulnerabilities were published for zabbix. CVE-2023-3523[0]: | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. https://huntr.dev/bounties/57e0be03-8484-415e-8b5c-c1fe4546eaac/ https://github.com/gpac/gpac/commit/64201a26476c12a7dbd7ffb5757743af6954db96 CVE-2023-37174[1]: | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a | segmentation violation in the dump_isom_scene function at | /mp4box/filedump.c. https://github.com/gpac/gpac/issues/2505 https://github.com/gpac/gpac/commit/549ff4484246f2bc4d5fec6760332b43774db483 CVE-2023-37765[2]: | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a | segmentation violation in the gf_dump_vrml_sffield function at | /lib/libgpac.so. https://github.com/gpac/gpac/issues/2515 https://github.com/gpac/gpac/commit/36e1b9900ff638576cb88636bbbe2116ed06dfdc CVE-2023-37766[3]: | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a | segmentation violation in the gf_isom_remove_user_data function at | /lib/libgpac.so. https://github.com/gpac/gpac/issues/2516 https://github.com/gpac/gpac/commit/a64c60ef0983be6db8ab1e4a663e0ce83ff7bf2c CVE-2023-37767[4]: | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a | segmentation violation in the BM_ParseIndexValueReplace function at | /lib/libgpac.so. https://github.com/gpac/gpac/issues/2514 https://github.com/gpac/gpac/commit/d414df635c773b21bbb3a9fbf17b101b1e8ea345 If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2023-3523 https://www.cve.org/CVERecord?id=CVE-2023-3523 [1] https://security-tracker.debian.org/tracker/CVE-2023-37174 https://www.cve.org/CVERecord?id=CVE-2023-37174 [2] https://security-tracker.debian.org/tracker/CVE-2023-37765 https://www.cve.org/CVERecord?id=CVE-2023-37765 [3] https://security-tracker.debian.org/tracker/CVE-2023-37766 https://www.cve.org/CVERecord?id=CVE-2023-37766 [4] https://security-tracker.debian.org/tracker/CVE-2023-37767 https://www.cve.org/CVERecord?id=CVE-2023-37767 Please adjust the affected versions in the BTS as needed.
