A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the wtvfile_open_sector function in wtvdec.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Nov 29, 2021 | Jun 2, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.3 | Jun 9, 2021 | Jun 2, 2021 |
| Suse | — | Upgrade libavdevice57-32bitUpgrade libswresample-develUpgrade libpostproc54Upgrade libavutil55Upgrade libavresample3-32bitUpgrade libavdevice57Upgrade libavformat57-32bitUpgrade libavcodec57Upgrade libswresample2-32bitUpgrade libavresample3-64bitUpgrade libavfilter6Upgrade libavformat-develUpgrade libavfilter6-32bitUpgrade libswresample2Upgrade libavresample3Upgrade libavcodec57-32bitUpgrade libswscale-develUpgrade libavformat57Upgrade libswscale4Upgrade libavresample-develUpgrade libpostproc-develUpgrade libswscale4-32bitUpgrade ffmpegUpgrade libavutil-develUpgrade libavcodec-develUpgrade ffmpeg-private-develUpgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libavdevice-develUpgrade libpostproc54-32bit | Sep 3, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro) | Mar 22, 2023 | Jun 2, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub