CVE-2020-21688
A heap-use-after-free in the av_freep function in libavutil/mem.c of FFmpeg 4.2 allows attackers to execute arbitrary code.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости ffmpeg · Страница 5
За последние 30 дней в ffmpeg опубликовано уязвимостей: 10; в каталоге KEV: 0.
Уязвимостей: 115
CVE-2020-21697
A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано ОбновленоCVE-2021-3566
Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm4
Опубликовано ОбновленоCVE-2021-38114
libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm4
Опубликовано ОбновленоCVE-2020-22054
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_dict_set function in dict.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm4
Опубликовано ОбновленоCVE-2020-22051
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the filter_frame function in vf_tile.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm6
Опубликовано ОбновленоCVE-2020-22049
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22046
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avpriv_float_dsp_allocl function in libavutil/float_dsp.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22044
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the url_open_dyn_buf_internal function in libavformat/aviobuf.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22043
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifo_alloc_common function in libavutil/fifo.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm6
Опубликовано ОбновленоCVE-2020-22042
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22041
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the av_buffersrc_add_frame_flags function in buffersrc.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22039
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the inavi_add_ientry function.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm6
Опубликовано ОбновленоCVE-2020-22037
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22040
A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22032
A heap-based Buffer Overflow vulnerability exists FFmpeg 4.2 at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm3
Опубликовано ОбновленоCVE-2020-22016
A heap-based Buffer Overflow vulnerability in FFmpeg 4.2 at libavcodec/get_bits.h when writing .mov files, which might lead to memory corruption and other potential consequences.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано ОбновленоCVE-2020-22022
A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано ОбновленоCVE-2020-22025
A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано ОбновленоCVE-2020-22031
A Heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_w3fdif.c in filter16_complex_low, which might lead to memory corruption and other potential consequences.
- Обновитесь до 7:2.8.17-0ubuntu0.1+esm2
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.