Lucene search
HistorySep 06, 2015 - 2:59 a.m.
CVE-2015-6824
cve-2015-6824
sws_init_context
libswscale
ffmpeg
denial of service
segmentation violation
video data
9.2 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.0%
The sws_init_context function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to cause a denial of service (segmentation violation) or possibly have unspecified other impact via crafted video data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ffmpeg:ffmpeg | ffmpeg | le | 2.7.1 |
| canonical:ubuntu_linux | canonical ubuntu linux | eq | 12.04 |
Related
prion
prion
Design/Logic Flaw
2015-09-06 02:59:00
debiancve
debiancve
CVE-2015-6824
2015-09-06 02:59:00
veracode
veracode
Denial Of Service (DoS)
2017-02-07 03:08:31
ubuntucve
ubuntucve
CVE-2015-6824
2015-09-05 00:00:00
cvelist
cvelist
CVE-2015-6824
2015-09-06 01:00:00
osv
osv
libav - security update
2018-12-20 00:00:00
nessus
nessus
Debian DLA-1611-2 : libav security update
2018-12-21 00:00:00
FreeBSD : ffmpeg -- multiple vulnerabilities (3d950687-b4c9-4a86-8478-c56743547af8)
2015-09-21 00:00:00
Ubuntu 12.04 LTS : libav vulnerabilities (USN-2944-1)
2016-04-05 00:00:00
debian
debian
[SECURITY] [DLA 1611-2] libav security update
2018-12-21 06:20:02
[SECURITY] [DLA 1611-1] libav security update
2018-12-20 21:52:50
freebsd
freebsd
ffmpeg -- multiple vulnerabilities
2015-09-05 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2944-1)
2016-04-05 00:00:00
Mageia: Security Advisory (MGASA-2016-0018)
2016-01-15 00:00:00
Debian: Security Advisory (DLA-1611-2)
2018-12-20 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2016-04-04 00:00:00
mageia
mageia
Updated ffmpeg packages fix security vulnerabilities
2016-01-15 04:52:38
9.2 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.0%
Related for CVE-2015-6824