A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the ff_frame_pool_get function in framepool.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | Jun 2, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | Jun 9, 2021 | Jun 2, 2021 |
| Suse | — | Upgrade libavdevice57Upgrade libavutil55-32bitUpgrade libpostproc54Upgrade libavutil55Upgrade ffmpeg-private-develUpgrade libavdevice57-32bitUpgrade libswresample-develUpgrade libavformat-develUpgrade libavfilter-develUpgrade libswscale4Upgrade libavresample3-32bitUpgrade libavcodec57-32bitUpgrade libswscale4-32bitUpgrade libswresample2Upgrade ffmpegUpgrade libavformat57-32bitUpgrade libavfilter6-32bitUpgrade libavutil-develUpgrade libavfilter6Upgrade libavresample3-64bitUpgrade libswscale-develUpgrade libavcodec57Upgrade libpostproc-develUpgrade libavresample3Upgrade libpostproc54-32bitUpgrade libswresample2-32bitUpgrade libavdevice-develUpgrade libavformat57Upgrade libavresample-develUpgrade libavcodec-devel | Sep 3, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub