Name: CVE-2020-21697: Use After Free
Creator: Rapid7
Published: 2021-08-10T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-21697, CWE-416, CVSS 6.5, EPSS 0.00992

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade ffmpeg	Aug 17, 2022	Aug 10, 2021
Ffmpeg	—	Upgrade to FFmpeg version 4.3.2	Aug 19, 2021	Aug 10, 2021
Suse	—	Upgrade libavformat57-32bitUpgrade libpostproc54Upgrade libswresample-develUpgrade libavdevice57-32bitUpgrade libavcodec57Upgrade libavresample3-32bitUpgrade libavutil-develUpgrade libswresample2-32bitUpgrade libavutil55Upgrade libavformat-develUpgrade libswscale4Upgrade libavfilter-develUpgrade libpostproc54-32bitUpgrade libswscale-develUpgrade libavresample3-64bitUpgrade libavresample-develUpgrade libavformat57Upgrade libswresample2Upgrade libavfilter6-32bitUpgrade libavresample3Upgrade ffmpeg-private-develUpgrade libpostproc-develUpgrade libavdevice57Upgrade libavcodec-develUpgrade libavfilter6Upgrade libswscale4-32bitUpgrade libavdevice-develUpgrade libavcodec57-32bitUpgrade ffmpegUpgrade libavutil55-32bit	Sep 3, 2021	Aug 10, 2021
Ubuntu	—	Upgrade libavformat58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libswscale4Upgrade libavutil55Upgrade ffmpeg (Ubuntu Pro)Upgrade libavdevice57Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavresample3Upgrade libswscale5Upgrade libswresample3Upgrade libavfilter-extra7Upgrade libavcodec58Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavdevice58Upgrade libavresample4Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavformat57Upgrade libavfilter-extra6Upgrade libavcodec57Upgrade libavutil56Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libpostproc55Upgrade libswresample2Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libpostproc54Upgrade ffmpegUpgrade libavfilter7Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavcodec-extra57	Jun 9, 2022	Aug 10, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence