Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | May 26, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3Upgrade to FFmpeg version 3.2.18Upgrade to FFmpeg version 3.4.11Upgrade to FFmpeg version 4.1.8Upgrade to FFmpeg version 4.2.7 | Jun 7, 2021 | May 26, 2021 |
| Suse | — | Upgrade libavutil55Upgrade ffmpeg-private-develUpgrade libavformat-develUpgrade ffmpegUpgrade libavresample-develUpgrade libavdevice57Upgrade libpostproc54-32bitUpgrade libswresample2Upgrade libavresample3Upgrade libswscale-develUpgrade libavcodec57Upgrade libavdevice57-32bitUpgrade libavformat57Upgrade libavutil55-32bitUpgrade libavresample3-32bitUpgrade libavformat57-32bitUpgrade libavutil-develUpgrade libavcodec57-32bitUpgrade libswresample2-32bitUpgrade libavcodec-develUpgrade libswscale4-32bitUpgrade libswresample-develUpgrade libavdevice-develUpgrade libavfilter6Upgrade libpostproc54Upgrade libpostproc-develUpgrade libswscale4Upgrade libavfilter6-32bitUpgrade libavfilter-devel | Jul 15, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade libavfilter6Upgrade ffmpegUpgrade libswscale4Upgrade libavdevice58Upgrade libpostproc55Upgrade libavfilter-extra7Upgrade libavutil56Upgrade libavcodec58Upgrade libswscale5Upgrade libavformat-extra58Upgrade libavresample3Upgrade libavformat57Upgrade libswresample2Upgrade libavcodec-extra57Upgrade libavdevice57Upgrade libavcodec-extra58Upgrade libavformat58Upgrade libavutil55Upgrade libavresample4Upgrade libpostproc54Upgrade libavcodec57Upgrade libavfilter7Upgrade libswresample3Upgrade libavfilter-extra6 | Jun 9, 2022 | May 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub