FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | May 25, 2021 |
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | May 25, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | May 28, 2021 | May 25, 2021 |
| Ubuntu | — | Upgrade libavfilter7Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc54Upgrade libavcodec57Upgrade libavformat-extra58Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libswscale5Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavformat58Upgrade libavutil55Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavresample4Upgrade libavresample3Upgrade libswscale4Upgrade libavformat57Upgrade libavcodec58Upgrade ffmpegUpgrade libavdevice58Upgrade libavfilter6Upgrade libswresample3Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libswresample2Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavdevice57Upgrade libavutil56Upgrade libpostproc55Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavfilter-extra7 | Jun 9, 2022 | May 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub