libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpegUpgrade ffmpeg4 | Aug 22, 2024 | Aug 4, 2021 |
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | Aug 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4 | Aug 13, 2021 | Aug 4, 2021 |
| Suse | — | Upgrade libavformat57-32bitUpgrade libavresample3-32bitUpgrade libavdevice57-32bitUpgrade libavcodec58_134Upgrade libavutil55Upgrade libavresample4_0Upgrade libpostproc54Upgrade libavcodec57Upgrade libavutil56_70Upgrade libswresample-develUpgrade libavutil-develUpgrade libswresample2-32bitUpgrade libavresample3-64bitUpgrade libavdevice-develUpgrade libswscale4Upgrade libavfilter6-32bitUpgrade libswscale5_9Upgrade libpostproc54-32bitUpgrade libavformat57Upgrade libswscale-develUpgrade libavfilter-develUpgrade libpostproc55_9Upgrade ffmpegUpgrade libavresample-develUpgrade libavdevice57Upgrade libavcodec-develUpgrade libavresample3Upgrade libavfilter6Upgrade libavcodec57-32bitUpgrade libavfilter7_110Upgrade libswresample2Upgrade ffmpeg-private-develUpgrade libswresample3_9Upgrade libpostproc-develUpgrade libavformat58_76Upgrade libavutil55-32bitUpgrade libavformat-develUpgrade libswscale4-32bitUpgrade libavdevice58_13 | Sep 3, 2021 | Aug 4, 2021 |
| Ubuntu | — | Upgrade libavcodec58Upgrade ffmpeg (Ubuntu Pro)Upgrade libavcodec-extra58Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavfilter-extra7Upgrade libswresample3Upgrade libavformat58Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libpostproc54Upgrade libswresample2Upgrade libpostproc55Upgrade libswscale5Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libswscale4Upgrade libavutil55Upgrade libavfilter6Upgrade libavdevice58Upgrade libavresample4Upgrade libavformat-ffmpeg56 (Ubuntu Pro)Upgrade libavdevice57Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavutil56Upgrade libavcodec57Upgrade libavresample3Upgrade libavformat-extra58Upgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavformat57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade ffmpegUpgrade libavfilter7Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec-extra57Upgrade libavfilter-extra6Upgrade libavresample-ffmpeg2 (Ubuntu Pro) | Jun 9, 2022 | Aug 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub