Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | Aug 5, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4 | Aug 16, 2021 | Aug 5, 2021 |
| Suse | — | Upgrade libavformat-develUpgrade libavresample-develUpgrade libavdevice57Upgrade ffmpegUpgrade libavresample3Upgrade libavutil55Upgrade libavfilter6Upgrade libavformat57-32bitUpgrade libavresample3-64bitUpgrade libswresample-develUpgrade libavdevice-develUpgrade libswresample2-32bitUpgrade libavfilter6-32bitUpgrade libavcodec57-32bitUpgrade libswscale4Upgrade libavutil-develUpgrade libpostproc54Upgrade libpostproc-develUpgrade libavcodec-develUpgrade libpostproc54-32bitUpgrade libavdevice57-32bitUpgrade libavformat57Upgrade libswscale-develUpgrade libswresample2Upgrade libavutil55-32bitUpgrade libavcodec57Upgrade ffmpeg-private-develUpgrade libavresample3-32bitUpgrade libavfilter-develUpgrade libswscale4-32bit | Oct 27, 2021 | Aug 5, 2021 |
| Ubuntu | — | Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro) | Mar 22, 2023 | Aug 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub