Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 17, 2022 | Sep 20, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 3.2.17Upgrade to FFmpeg version 4.2.6Upgrade to FFmpeg version 4.1.9Upgrade to FFmpeg version 3.4.10 | Sep 27, 2021 | Sep 20, 2021 |
| Suse | — | Upgrade libavformat-develUpgrade libavfilter6-32bitUpgrade libavfilter-develUpgrade libpostproc54Upgrade libavcodec57-32bitUpgrade libavcodec-develUpgrade libswresample-develUpgrade libavresample-develUpgrade libswscale4-32bitUpgrade libswscale4Upgrade libavdevice57-32bitUpgrade libswresample2-32bitUpgrade libavresample3-64bitUpgrade libswscale-develUpgrade libavutil55Upgrade libswresample2Upgrade libavutil-develUpgrade libavresample3Upgrade libavdevice-develUpgrade libavformat57-32bitUpgrade libavdevice57Upgrade ffmpegUpgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade ffmpeg-private-develUpgrade libavfilter6Upgrade libavcodec57Upgrade libpostproc-develUpgrade libavformat57Upgrade libpostproc54-32bit | Oct 27, 2021 | Sep 20, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub