Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.
Weakness
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Gpac | Gpac | * | 2.1 (excluding) |
| Gpac | Gpac | 2.1-dev (including) | 2.1-dev (including) |
| Gpac | Ubuntu | bionic | * |
| Gpac | Ubuntu | focal | * |
| Gpac | Ubuntu | kinetic | * |
| Gpac | Ubuntu | lunar | * |
| Gpac | Ubuntu | trusty | * |
| Gpac | Ubuntu | trusty/esm | * |
| Gpac | Ubuntu | xenial | * |
Potential Mitigations
Related Attack Patterns
References
- https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf
- https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235
- https://www.debian.org/security/2023/dsa-5411
- https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf
- https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235
- https://www.debian.org/security/2023/dsa-5411