A null pointer dereference issue was discovered in 'FFmpeg' in decode_main_header() function of libavformat/nutdec.c file. The flaw occurs because the function lacks check of the return value of avformat_new_stream() and triggers the null pointer dereference error, causing an application to crash.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | debian-upgrade-ffmpeg | Jun 15, 2023 | Jan 12, 2023 | |
| Ffmpeg | ffmpeg-upgrade-4_3_7ffmpeg-upgrade-4_4_4ffmpeg-upgrade-5_0_3ffmpeg-upgrade-5_1 | Jan 23, 2023 | Jan 12, 2023 | |
| Freebsd | freebsd-upgrade-package-ffmpegfreebsd-upgrade-package-ffmpeg4freebsd-upgrade-package-avidemuxfreebsd-upgrade-package-emby-serverfreebsd-upgrade-package-emby-server-develfreebsd-upgrade-package-handbrakefreebsd-upgrade-package-mythtvfreebsd-upgrade-package-mythtv-frontend | Apr 14, 2023 | Apr 7, 2023 | |
| Suse | — | suse-upgrade-ffmpegsuse-upgrade-ffmpeg-4suse-upgrade-ffmpeg-4-libavcodec-develsuse-upgrade-ffmpeg-4-libavdevice-develsuse-upgrade-ffmpeg-4-libavfilter-develsuse-upgrade-ffmpeg-4-libavformat-develsuse-upgrade-ffmpeg-4-libavresample-develsuse-upgrade-ffmpeg-4-libavutil-develsuse-upgrade-ffmpeg-4-libpostproc-develsuse-upgrade-ffmpeg-4-libswresample-develsuse-upgrade-ffmpeg-4-libswscale-develsuse-upgrade-ffmpeg-4-private-develsuse-upgrade-ffmpeg-private-develsuse-upgrade-libavcodec-develsuse-upgrade-libavcodec57suse-upgrade-libavcodec57-32bitsuse-upgrade-libavcodec58_134suse-upgrade-libavcodec58_134-32bitsuse-upgrade-libavdevice-develsuse-upgrade-libavdevice57suse-upgrade-libavdevice57-32bitsuse-upgrade-libavdevice58_13suse-upgrade-libavdevice58_13-32bitsuse-upgrade-libavfilter-develsuse-upgrade-libavfilter6suse-upgrade-libavfilter6-32bitsuse-upgrade-libavfilter7_110suse-upgrade-libavfilter7_110-32bitsuse-upgrade-libavformat-develsuse-upgrade-libavformat57suse-upgrade-libavformat57-32bitsuse-upgrade-libavformat58_76suse-upgrade-libavformat58_76-32bitsuse-upgrade-libavresample-develsuse-upgrade-libavresample3suse-upgrade-libavresample3-32bitsuse-upgrade-libavresample4_0suse-upgrade-libavresample4_0-32bitsuse-upgrade-libavutil-develsuse-upgrade-libavutil55suse-upgrade-libavutil55-32bitsuse-upgrade-libavutil56_70suse-upgrade-libavutil56_70-32bitsuse-upgrade-libpostproc-develsuse-upgrade-libpostproc54suse-upgrade-libpostproc54-32bitsuse-upgrade-libpostproc55_9suse-upgrade-libpostproc55_9-32bitsuse-upgrade-libswresample-develsuse-upgrade-libswresample2suse-upgrade-libswresample2-32bitsuse-upgrade-libswresample3_9suse-upgrade-libswresample3_9-32bitsuse-upgrade-libswscale-develsuse-upgrade-libswscale4suse-upgrade-libswscale4-32bitsuse-upgrade-libswscale5_9suse-upgrade-libswscale5_9-32bit | Jan 27, 2023 | Jan 12, 2023 |
| Ubuntu | ubuntu-pro-upgrade-ffmpegubuntu-pro-upgrade-libav-toolsubuntu-pro-upgrade-libavcodec-extraubuntu-pro-upgrade-libavcodec-extra57ubuntu-pro-upgrade-libavcodec-extra58ubuntu-pro-upgrade-libavcodec-ffmpeg-extra56ubuntu-pro-upgrade-libavcodec-ffmpeg56ubuntu-pro-upgrade-libavcodec57ubuntu-pro-upgrade-libavcodec58ubuntu-pro-upgrade-libavdevice-ffmpeg56ubuntu-pro-upgrade-libavdevice57ubuntu-pro-upgrade-libavdevice58ubuntu-pro-upgrade-libavfilter-extraubuntu-pro-upgrade-libavfilter-extra6ubuntu-pro-upgrade-libavfilter-extra7ubuntu-pro-upgrade-libavfilter-ffmpeg5ubuntu-pro-upgrade-libavfilter6ubuntu-pro-upgrade-libavfilter7ubuntu-pro-upgrade-libavformat-extraubuntu-pro-upgrade-libavformat-extra58ubuntu-pro-upgrade-libavformat-ffmpeg56ubuntu-pro-upgrade-libavformat57ubuntu-pro-upgrade-libavformat58ubuntu-pro-upgrade-libavresample-ffmpeg2ubuntu-pro-upgrade-libavresample3ubuntu-pro-upgrade-libavresample4ubuntu-pro-upgrade-libavutil-ffmpeg54ubuntu-pro-upgrade-libavutil55ubuntu-pro-upgrade-libavutil56ubuntu-pro-upgrade-libpostproc-ffmpeg53ubuntu-pro-upgrade-libpostproc54ubuntu-pro-upgrade-libpostproc55ubuntu-pro-upgrade-libswresample-ffmpeg1ubuntu-pro-upgrade-libswresample2ubuntu-pro-upgrade-libswresample3ubuntu-pro-upgrade-libswscale-ffmpeg3ubuntu-pro-upgrade-libswscale4ubuntu-pro-upgrade-libswscale5ubuntu-upgrade-ffmpegubuntu-upgrade-libavcodec-extraubuntu-upgrade-libavcodec-extra59ubuntu-upgrade-libavcodec59ubuntu-upgrade-libavdevice59ubuntu-upgrade-libavfilter-extraubuntu-upgrade-libavfilter-extra8ubuntu-upgrade-libavfilter8ubuntu-upgrade-libavformat-extraubuntu-upgrade-libavformat-extra59ubuntu-upgrade-libavformat59ubuntu-upgrade-libavutil57ubuntu-upgrade-libpostproc56ubuntu-upgrade-libswresample4ubuntu-upgrade-libswscale6 | Mar 22, 2023 | Jan 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub