FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | May 25, 2021 |
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libswscale5Upgrade libavformat-extra58Upgrade libavcodec-extra58Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavresample4Upgrade libavfilter7Upgrade libavfilter-extra6Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavutil55Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc54Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavformat58Upgrade libavcodec57Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavutil56Upgrade libswresample2Upgrade libpostproc55Upgrade ffmpegUpgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec58Upgrade libavdevice58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavresample3Upgrade ffmpeg (Ubuntu Pro)Upgrade libavdevice57Upgrade libavfilter6Upgrade libavcodec-extra57Upgrade libswresample3Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libswscale4Upgrade libavfilter-extra7Upgrade libavformat57 | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub