CVE-2023-5595: 
NixOS vulnerability analysis and mitigation

CVE-2023-5595 is a Denial of Service vulnerability affecting GitHub repository gpac/gpac versions prior to 2.3.0-DEV. The vulnerability was discovered and disclosed in October 2023, impacting the GPAC multimedia framework (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (MEDIUM) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. This indicates that the vulnerability requires local access and user interaction to exploit, but can result in high availability impact. The weakness is categorized under CWE-400 (Uncontrolled Resource Consumption) (NVD).

The primary impact of this vulnerability is on system availability through denial of service. When successfully exploited, it can cause the affected GPAC application to become unresponsive or crash, disrupting normal operations (NVD).

The vulnerability requires local access and user interaction to exploit. It has been assigned a relatively low attack complexity score, indicating that once the necessary conditions are met, it is straightforward to exploit (NVD).

The primary mitigation is to update to GPAC version 2.3.0-DEV or later. A patch has been released to address this vulnerability, which can be found in the repository commit (GPAC Patch).