Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen.
Product
Das FFmpeg-Projekt besteht aus freien Programmen und Bibliotheken, die es ermöglichen, digitales Video- und Audiomaterial aufzunehmen, zu konvertieren, zu streamen und abzuspielen. Zudem enthält es mit libavcodec eine Audio- und Video-Codec-Sammlung, die verschiedene Codecs zur Verfügung stellt.
Vulnerabilities 12
-
Unscored —
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might …
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which …
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which m…
-
Unscored —
A heap-based Buffer Overflow vulnerabililty exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_bitplanenoise.c, whi…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to …
-
Unscored —
A heap-based Buffer Overflow vulnerability exits in FFmpeg 4.2 in deflate16 at libavfilter/vf_neighbor.c, which might l…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_deriva…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, wh…
-
Unscored —
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, whi…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which mig…
-
Unscored —
A heap-based Buffer Overflow Vulnerability exists FFmpeg 4.2 at libavfilter/vf_vmafmotion.c in convolution_y_8bit, whic…
-
Unscored —
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_floodfill.c, which might lead to memory …
Revision history
-
#7
Neue Updates von SUSE aufgenommen
-
#6
Neue Updates von Ubuntu aufgenommen
-
#5
Neue Updates von Debian aufgenommen
-
#4
Neue Updates von SUSE aufgenommen
-
#3
Neue Updates von Debian aufgenommen
-
#2
Neue Updates von SUSE aufgenommen
-
#1
Initiale Fassung
References
-
NIST Database vom 2021-05-27
https://nvd.nist.gov/vuln/detail/CVE-2020-22016
-
Debian Security Advisory DSA-4990 vom 2021-10-20
https://www.debian.org/security/2021/dsa-4990
-
SUSE Security Update SUSE-SU-2021:2322-1 vom 2021-07-14
https://lists.suse.com/pipermail/sle-security-updates/2021-July/009140.html
-
Debian Security Advisory DLA-2742 vom 2021-08-15
https://lists.debian.org/debian-lts-announce/2021/08/msg00018.html
-
SUSE Security Update SUSE-SU-2021:2929-1 vom 2021-09-02
https://lists.suse.com/pipermail/sle-security-updates/2021-September/009391.html
-
Ubuntu Security Notice USN-5472-1 vom 2022-06-09
https://ubuntu.com/security/notices/USN-5472-1
-
SUSE Security Update SUSE-SU-2024:3114-1 vom 2024-09-03
https://lists.suse.com/pipermail/sle-security-updates/2024-September/019351.html