A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at options.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-ffmpegalpine-linux-upgrade-ffmpeg4 | Aug 22, 2024 | Jun 1, 2021 | |
| Debian | debian-upgrade-ffmpeg | Nov 29, 2021 | Jun 1, 2021 | |
| Ffmpeg | ffmpeg-upgrade-2_8_18ffmpeg-upgrade-3_2_16ffmpeg-upgrade-3_4_9ffmpeg-upgrade-4_1_7ffmpeg-upgrade-4_2_5ffmpeg-upgrade-4_3_3ffmpeg-upgrade-4_4_1ffmpeg-upgrade-5_0 | Jun 9, 2021 | Jun 1, 2021 | |
| Suse | — | suse-upgrade-ffmpegsuse-upgrade-ffmpeg-private-develsuse-upgrade-libavcodec-develsuse-upgrade-libavcodec57suse-upgrade-libavcodec57-32bitsuse-upgrade-libavdevice-develsuse-upgrade-libavdevice57suse-upgrade-libavdevice57-32bitsuse-upgrade-libavfilter-develsuse-upgrade-libavfilter6suse-upgrade-libavfilter6-32bitsuse-upgrade-libavformat-develsuse-upgrade-libavformat57suse-upgrade-libavformat57-32bitsuse-upgrade-libavresample-develsuse-upgrade-libavresample3suse-upgrade-libavresample3-32bitsuse-upgrade-libavresample3-64bitsuse-upgrade-libavutil-develsuse-upgrade-libavutil55suse-upgrade-libavutil55-32bitsuse-upgrade-libpostproc-develsuse-upgrade-libpostproc54suse-upgrade-libpostproc54-32bitsuse-upgrade-libswresample-develsuse-upgrade-libswresample2suse-upgrade-libswresample2-32bitsuse-upgrade-libswscale-develsuse-upgrade-libswscale4suse-upgrade-libswscale4-32bit | Oct 27, 2021 | Jun 1, 2021 |
| Ubuntu | ubuntu-pro-upgrade-ffmpegubuntu-pro-upgrade-libavcodec-extraubuntu-pro-upgrade-libavcodec-ffmpeg-extra56ubuntu-pro-upgrade-libavcodec-ffmpeg56ubuntu-pro-upgrade-libavdevice-ffmpeg56ubuntu-pro-upgrade-libavfilter-ffmpeg5ubuntu-pro-upgrade-libavformat-ffmpeg56ubuntu-pro-upgrade-libavresample-ffmpeg2ubuntu-pro-upgrade-libavutil-ffmpeg54ubuntu-pro-upgrade-libpostproc-ffmpeg53ubuntu-pro-upgrade-libswresample-ffmpeg1ubuntu-pro-upgrade-libswscale-ffmpeg3ubuntu-upgrade-ffmpegubuntu-upgrade-libavcodec-extra57ubuntu-upgrade-libavcodec-extra58ubuntu-upgrade-libavcodec57ubuntu-upgrade-libavcodec58ubuntu-upgrade-libavdevice57ubuntu-upgrade-libavdevice58ubuntu-upgrade-libavfilter-extra6ubuntu-upgrade-libavfilter-extra7ubuntu-upgrade-libavfilter6ubuntu-upgrade-libavfilter7ubuntu-upgrade-libavformat-extra58ubuntu-upgrade-libavformat57ubuntu-upgrade-libavformat58ubuntu-upgrade-libavresample3ubuntu-upgrade-libavresample4ubuntu-upgrade-libavutil55ubuntu-upgrade-libavutil56ubuntu-upgrade-libpostproc54ubuntu-upgrade-libpostproc55ubuntu-upgrade-libswresample2ubuntu-upgrade-libswresample3ubuntu-upgrade-libswscale4ubuntu-upgrade-libswscale5 | Jun 9, 2022 | Jun 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub