A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | Jun 2, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | Jun 9, 2021 | Jun 2, 2021 |
| Suse | — | Upgrade libavformat57-32bitUpgrade libavcodec57-32bitUpgrade ffmpegUpgrade libavfilter-develUpgrade libavdevice57-32bitUpgrade libavresample3-32bitUpgrade libswresample-develUpgrade libavdevice57Upgrade ffmpeg-private-develUpgrade libavformat-develUpgrade libswscale4Upgrade libavutil55Upgrade libswresample2Upgrade libpostproc54Upgrade libswscale4-32bitUpgrade libavutil55-32bitUpgrade libavdevice-develUpgrade libpostproc54-32bitUpgrade libavfilter6-32bitUpgrade libavresample3Upgrade libavresample3-64bitUpgrade libavutil-develUpgrade libswresample2-32bitUpgrade libavcodec-develUpgrade libavresample-develUpgrade libavformat57Upgrade libswscale-develUpgrade libavfilter6Upgrade libpostproc-develUpgrade libavcodec57 | Sep 3, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub