Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By crafting a legitimate "ffconcat" file that references an image, followed by a file the triggers the tty demuxer, the contents of the second file will be copied into the output file verbatim (as long as the `-vcodec copy` option is passed to ffmpeg).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | Aug 5, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4 | Aug 16, 2021 | Aug 5, 2021 |
| Suse | — | Upgrade libavfilter6-32bitUpgrade libswresample2-32bitUpgrade libavcodec57-32bitUpgrade libswresample-develUpgrade libavdevice-develUpgrade libavfilter6Upgrade libpostproc54Upgrade libavformat57-32bitUpgrade libavcodec-develUpgrade libswscale4Upgrade libavutil-develUpgrade libswscale4-32bitUpgrade libavresample3Upgrade libavresample3-32bitUpgrade libavutil55Upgrade libavformat-develUpgrade libavdevice57Upgrade ffmpeg-private-develUpgrade libswscale-develUpgrade libavformat57Upgrade ffmpegUpgrade libavcodec57Upgrade libavresample-develUpgrade libavfilter-develUpgrade libavutil55-32bitUpgrade libpostproc54-32bitUpgrade libavdevice57-32bitUpgrade libswresample2Upgrade libavresample3-64bitUpgrade libpostproc-devel | Oct 27, 2021 | Aug 5, 2021 |
| Ubuntu | — | Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade ffmpeg (Ubuntu Pro)Upgrade libavformat-ffmpeg56 (Ubuntu Pro) | Mar 22, 2023 | Aug 5, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub