CVE Vulnerabilities

CVE-2022-35165

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Aug 18, 2022 | Modified: Aug 22, 2022
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639 allows attackers to cause a Denial of Service (DoS) via a crafted mp4 input.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Bento4 Axiosys 1.6.0-639 (including) 1.6.0-639 (including)
Kodi-inputstream-adaptive Ubuntu kinetic *
Kodi-inputstream-adaptive Ubuntu lunar *
Kodi-inputstream-adaptive Ubuntu mantic *
Kodi-inputstream-adaptive Ubuntu trusty *
Kodi-inputstream-adaptive Ubuntu xenial *

References