libavcodec/dnxhddec.c in FFmpeg 4.4 does not check the return value of the init_vlc function, a similar issue to CVE-2013-0868.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade ffmpeg4Upgrade ffmpeg | Aug 22, 2024 | Aug 4, 2021 |
| Debian | — | Upgrade ffmpeg | Aug 16, 2021 | Aug 4, 2021 |
| Ffmpeg | — | Upgrade to FFmpeg version 4.4 | Aug 13, 2021 | Aug 4, 2021 |
| Suse | — | Upgrade libavformat57-32bitUpgrade libavresample4_0Upgrade libswresample2-32bitUpgrade libavdevice57-32bitUpgrade libpostproc54Upgrade libavcodec57Upgrade libavresample3-32bitUpgrade libavcodec58_134Upgrade libswresample-develUpgrade libavutil-develUpgrade libavutil56_70Upgrade libavutil55Upgrade libswresample3_9Upgrade libpostproc54-32bitUpgrade libavdevice57Upgrade libavfilter6Upgrade libavresample3Upgrade libavresample-develUpgrade libswscale4-32bitUpgrade libavformat-develUpgrade libavfilter6-32bitUpgrade ffmpeg-private-develUpgrade libavdevice-develUpgrade libswscale4Upgrade libpostproc-develUpgrade libavformat58_76Upgrade libavcodec-develUpgrade libavfilter-develUpgrade libavdevice58_13Upgrade libavresample3-64bitUpgrade libavutil55-32bitUpgrade libswscale5_9Upgrade libavfilter7_110Upgrade libavcodec57-32bitUpgrade libswresample2Upgrade libavformat57Upgrade ffmpegUpgrade libswscale-develUpgrade libpostproc55_9 | Sep 3, 2021 | Aug 4, 2021 |
| Ubuntu | — | Upgrade libavfilter-ffmpeg5 (Ubuntu Pro)Upgrade libavfilter7Upgrade libavresample-ffmpeg2 (Ubuntu Pro)Upgrade libavdevice57Upgrade libavformat57Upgrade libavutil-ffmpeg54 (Ubuntu Pro)Upgrade libavcodec-ffmpeg-extra56 (Ubuntu Pro)Upgrade libavfilter-extra6Upgrade libavresample3Upgrade libavcodec57Upgrade libavcodec-extra57Upgrade libavformat-extra58Upgrade ffmpegUpgrade libswresample-ffmpeg1 (Ubuntu Pro)Upgrade libavutil56Upgrade libavcodec-extra (Ubuntu Pro)Upgrade libavcodec-ffmpeg56 (Ubuntu Pro)Upgrade libavresample4Upgrade libpostproc54Upgrade libpostproc-ffmpeg53 (Ubuntu Pro)Upgrade libavfilter6Upgrade libavdevice-ffmpeg56 (Ubuntu Pro)Upgrade libavcodec58Upgrade libswresample2Upgrade libswscale4Upgrade libswscale5Upgrade libavformat58Upgrade libswresample3Upgrade libswscale-ffmpeg3 (Ubuntu Pro)Upgrade libavdevice58Upgrade libavfilter-extra7Upgrade libavcodec-extra58Upgrade libpostproc55Upgrade ffmpeg (Ubuntu Pro)Upgrade libavutil55Upgrade libavformat-ffmpeg56 (Ubuntu Pro) | Jun 9, 2022 | Aug 4, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub