vulnerability

SUSE: CVE-2019-15942: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
2019-09-05
Added
2020-01-15
Modified
2022-02-04

Description

FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer.

Solution(s)

suse-upgrade-ffmpeg-4-libavcodec-develsuse-upgrade-ffmpeg-4-libavdevice-develsuse-upgrade-ffmpeg-4-libavfilter-develsuse-upgrade-ffmpeg-4-libavformat-develsuse-upgrade-ffmpeg-4-libavresample-develsuse-upgrade-ffmpeg-4-libavutil-develsuse-upgrade-ffmpeg-4-libpostproc-develsuse-upgrade-ffmpeg-4-libswresample-develsuse-upgrade-ffmpeg-4-libswscale-develsuse-upgrade-ffmpeg-4-private-develsuse-upgrade-libavcodec58suse-upgrade-libavcodec58-32bitsuse-upgrade-libavcodec58-64bitsuse-upgrade-libavdevice58suse-upgrade-libavdevice58-32bitsuse-upgrade-libavdevice58-64bitsuse-upgrade-libavfilter7suse-upgrade-libavfilter7-32bitsuse-upgrade-libavfilter7-64bitsuse-upgrade-libavformat58suse-upgrade-libavformat58-32bitsuse-upgrade-libavformat58-64bitsuse-upgrade-libavresample4suse-upgrade-libavresample4-32bitsuse-upgrade-libavresample4-64bitsuse-upgrade-libavutil56suse-upgrade-libavutil56-32bitsuse-upgrade-libavutil56-64bitsuse-upgrade-libpostproc55suse-upgrade-libpostproc55-32bitsuse-upgrade-libpostproc55-64bitsuse-upgrade-libswresample3suse-upgrade-libswresample3-32bitsuse-upgrade-libswresample3-64bitsuse-upgrade-libswscale5suse-upgrade-libswscale5-32bitsuse-upgrade-libswscale5-64bit
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.