FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libavutil55Upgrade ffmpeg (Ubuntu Pro)Upgrade libpostproc55Upgrade libavcodec-extra57Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat58Upgrade libswscale5Upgrade libswresample3Upgrade libavformat57Upgrade libavfilter6Upgrade libavcodec-extra58Upgrade libavdevice57Upgrade libswresample2Upgrade libavresample4Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavutil56Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libpostproc54Upgrade libavresample3Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavfilter-extra7Upgrade libavformat-extra58Upgrade ffmpegUpgrade libavdevice58Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter7Upgrade libswscale4Upgrade libavcodec58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro) | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub