CVE-2021-4043
Motion Spell GPAC Null Pointer Dereference Vulnera - [Actively Exploited]
Description
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
INFO
Published Date :
Feb. 4, 2022, 11:15 p.m.
Last Modified :
Nov. 21, 2024, 6:36 a.m.
Source :
[email protected]
Remotely Exploitable :
No
Impact Score :
3.6
Exploitability Score :
1.8
CISA KEV (Known Exploited Vulnerabilities)
For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild.
Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service (DoS) condition.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db ; https://nvd.nist.gov/vuln/detail/CVE-2021-4043
Public PoC/Exploit Available at Github
CVE-2021-4043 has a 11 public PoC/Exploit available at Github.
Go to the Public Exploits tab to see the list.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2021-4043.
| URL | Resource |
|---|---|
| https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db | Patch Third Party Advisory |
| https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 | Exploit Issue Tracking Third Party Advisory |
| https://www.debian.org/security/2023/dsa-5411 | Mailing List Third Party Advisory |
| https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db | Patch Third Party Advisory |
| https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 | Exploit Issue Tracking Third Party Advisory |
| https://www.debian.org/security/2023/dsa-5411 | Mailing List Third Party Advisory |
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Config files for my GitHub profile.
config github-config
Pengecekan dan perbaikan sistem dari celah keamanan polkit
Python
All CVE - PoC in GitHub
poc proofofconcept tester allcve cvegithub cvenew cvepoc cveupdate
None
None
None
None
None
自动化进行目标资产探测和安全漏洞扫描｜适用于赏金活动、SRC活动、大规模使用、大范围使用|通过使用被动在线资源来发现网站的有效子域｜通过强大且灵活的模板，模拟各种安全漏洞检查！Automate target asset detection and security vulnerability scanning | Suitable for bounty campaigns, SRC campaigns, mass usage, mass usage | Discover valid subdomains of websites by using passive online resources | Simulate various Security Vulnerability Check
poc scanner subdomain vulnerability-scanners
PwnKit-Hunter is here to help you check if your systems are vulnerable to CVE-2021-4043, a.k.a. PwnKit
Python C
CVE-2021-4034
C
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2021-4043 vulnerability anywhere in the article.
-
Hackread - Latest Cybersecurity, Tech, Crypto & Hacking News
New Linux Malware ‘Perfctl’ Targets Millions by Mimicking System Files
New Linux malware ‘Perfctl’ is targeting millions worldwide, mimicking system files to evade detection. This sophisticated malware compromises Linux servers, exploiting vulnerabilities for cryptominin ... Read more
-
Cybersecurity News
Linux Servers Under Siege: “Perfctl” Malware Evades Detection for Years
The entire attack flow | Image: Aqua NautilusIn a recent report by Aqua Nautilus researchers Assaf Morag and Idan Revivo, the Linux server community has been alerted to the presence of a particularly ... Read more
-
BleepingComputer
Linux malware “perfctl” behind years-long cryptomining campaign
A Linux malware named "perfctl" has been targeting Linux servers and workstations for at least three years, remaining largely undetected through high levels of evasion and the use of rootkits. Accordi ... Read more
-
The Hacker News
New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking
Linux servers are the target of an ongoing campaign that delivers a stealthy malware dubbed perfctl with the primary aim of running a cryptocurrency miner and proxyjacking software. "Perfctl is partic ... Read more
-
Dark Reading
Near-'perfctl' Fileless Malware Targets Millions of Linux Servers
Source: J Poulssen via Alamy Stock PhotoA multipurpose and mysterious malware dropper has been terrorizing Linux servers worldwide for years, infecting untold thousands of victims with cryptomining an ... Read more
-
Cybersecurity News
CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has once again raised the alarm, adding four new security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These a ... Read more
-
TheCyberThrone
CISA KEV Update Part VII – September 2024
The US CISA has added 4 vulnerabilities to its Known Exploited Vulnerability Catalog, based on the evidence of exploitationCVE-2019-0344 SAP Commerce Cloud Deserialization of Untrusted Data Vulnerabil ... Read more
-
Cybersecurity News
Exploit Kits, Cryptominers, Proxyjackers: The New Face of Selenium Grid Abuse
Researchers at Cado Security Labs have uncovered two malicious campaigns that exploit misconfigured instances of Selenium Grid. Once a trusted tool for browser automation and testing, Selenium Grid ha ... Read more
-
The Hacker News
Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking
Cryptocurrency / Network Security Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server tha ... Read more
-
Dark Reading
Hackers Proxyjack & Cryptomine Selenium Grid Servers
Source: Olekcii Mach via Alamy Stock PhotoThreat actors are infecting Internet-exposed Selenium Grid servers, with the goal of using victims' Internet bandwidth for cryptomining, proxyjacking, and pot ... Read more
The following table lists the changes that have been made to the
CVE-2021-4043 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db Added Reference https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 Added Reference https://www.debian.org/security/2023/dsa-5411 -
CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725
Nov. 08, 2024
Action Type Old Value New Value Removed Due Date 2024-10-21 Removed Vulnerability Name Motion Spell GPAC Null Pointer Dereference Vulnerability Removed Required Action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Removed Date Added 2024-09-30 -
Modified Analysis by [email protected]
Oct. 02, 2024
Action Type Old Value New Value Changed Reference Type https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 Exploit, Issue Tracking, Patch, Third Party Advisory https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 Exploit, Issue Tracking, Third Party Advisory Changed Reference Type https://www.debian.org/security/2023/dsa-5411 No Types Assigned https://www.debian.org/security/2023/dsa-5411 Mailing List, Third Party Advisory Added CPE Configuration OR *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* -
CVE CISA KEV Update by 9119a7d8-5eab-497f-8521-727c672e3725
Oct. 01, 2024
Action Type Old Value New Value Added Due Date 2024-10-21 Added Vulnerability Name Motion Spell GPAC Null Pointer Dereference Vulnerability Added Date Added 2024-09-30 Added Required Action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. -
CVE Modified by [email protected]
May. 14, 2024
Action Type Old Value New Value -
CVE Modified by [email protected]
May. 27, 2023
Action Type Old Value New Value Added Reference https://www.debian.org/security/2023/dsa-5411 [No Types Assigned] -
Initial Analysis by [email protected]
Feb. 09, 2022
Action Type Old Value New Value Added CVSS V2 Metadata Victim must voluntarily interact with attack mechanism Added CVSS V2 NIST (AV:N/AC:M/Au:N/C:N/I:N/A:P) Added CVSS V3.1 NIST AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H Changed Reference Type https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db No Types Assigned https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db Patch, Third Party Advisory Changed Reference Type https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 No Types Assigned https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 Exploit, Issue Tracking, Patch, Third Party Advisory Added CPE Configuration OR *cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:* versions up to (excluding) 1.1.0
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2021-4043 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2021-4043
weaknesses.
Exploit Prediction
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.
0.06 }} -0.02%
score
0.29974
percentile