FFmpeg 4.1.3 is affected by a Divide By Zero issue via libavcodec/ratecontrol.c, which allows a remote malicious user to cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.0.5Upgrade to FFmpeg version 3.2.15Upgrade to FFmpeg version 4.1.5Upgrade to FFmpeg version 3.4.7Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 2.8.16Upgrade to FFmpeg version 4.2.2 | May 28, 2021 | May 25, 2021 |
| Suse | — | Upgrade libavdevice57-32bitUpgrade libpostproc54-32bitUpgrade ffmpegUpgrade libavfilter6Upgrade libavcodec57Upgrade libpostproc54Upgrade libavcodec57-32bitUpgrade libswscale-develUpgrade libavformat57Upgrade libswresample2Upgrade libavfilter-develUpgrade ffmpeg-private-develUpgrade libswresample-develUpgrade libavfilter6-32bitUpgrade libavformat-develUpgrade libavresample-develUpgrade libpostproc-develUpgrade libswscale4Upgrade libavdevice57Upgrade libavcodec-develUpgrade libavresample3Upgrade libavutil-develUpgrade libavresample3-32bitUpgrade libavformat57-32bitUpgrade libswresample2-32bitUpgrade libavdevice-develUpgrade libavutil55-32bitUpgrade libavutil55Upgrade libswscale4-32bit | Jul 15, 2021 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub