First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-45511

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A memory leak in tsMuxer version git-2539d07 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/justdan96/tsMuxerThird Party Advisory
https://github.com/justdan96/tsMuxer/issues/780Exploit, Issue Tracking, Third Party Advisory
https://github.com/justdan96/tsMuxerThird Party Advisory
https://github.com/justdan96/tsMuxer/issues/780Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Oct 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-45527.1Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder use CVE-2023-45535.3Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files CVE-2023-455398.2HAProxy before 2.8.2 accepts # as part of the URI component, which might allow remote attackers to obtain sensitive information or have unsp CVE-2023-45546.5Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forg CVE-2023-455406.5An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment CVE-2023-455426.1Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q CVE-2023-45556.1A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. Affected by this vulnerabili CVE-2023-455526.5In VeridiumID before 3.5.0, a stored cross-site scripting (XSS) vulnerability has been discovered in the admin portal that allows an authent CVE-2023-455549.8File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via modification of the imageext parameter fr CVE-2023-455557.8File Upload vulnerability in zzzCMS v.2.1.9 allows a remote attacker to execute arbitrary code via a crafted file to the down_url function i CVE-2023-455565.4Cross Site Scripting vulnerability in Mybb Mybb Forums v.1.8.33 allows a local attacker to execute arbitrary code via the theme Name paramet CVE-2023-455587.5An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.