Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Sep 20, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.1.9Upgrade to FFmpeg version 3.4.10Upgrade to FFmpeg version 3.2.17Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 4.2.6 | Sep 27, 2021 | Sep 20, 2021 |
| Suse | — | Upgrade libavfilter6Upgrade ffmpegUpgrade libavresample3Upgrade libpostproc54-32bitUpgrade libavdevice57Upgrade libavformat57Upgrade libavutil55-32bitUpgrade ffmpeg-private-develUpgrade libavdevice-develUpgrade libavresample3-32bitUpgrade libavformat57-32bitUpgrade libavcodec57Upgrade libpostproc-develUpgrade libswresample2Upgrade libavresample3-64bitUpgrade libavcodec57-32bitUpgrade libswresample2-32bitUpgrade libavutil-develUpgrade libavcodec-develUpgrade libavutil55Upgrade libswscale-develUpgrade libswresample-develUpgrade libavdevice57-32bitUpgrade libswscale4-32bitUpgrade libavresample-develUpgrade libpostproc54Upgrade libavfilter6-32bitUpgrade libavfilter-develUpgrade libswscale4Upgrade libavformat-devel | Oct 27, 2021 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub