CVE-2018-15822

🗓️ 23 Aug 2018 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 182 Views

The flv_write_packet function in libavformat/flvenc.c in FFmpeg through 2.8 does not check for an empty audio packet, leading to an assertion failure. CVE-2018-1582

Reporter	Title	Published	Views	Family All 56
AlpineLinux	CVE-2018-15822	23 Aug 201822:00	–	alpinelinux
Cloud Foundry	USN-3967-1: FFmpeg vulnerabilities \| Cloud Foundry	20 May 201900:00	–	cloudfoundry
Cloud Foundry	USN-4431-1: FFmpeg vulnerabilities \| Cloud Foundry	27 Aug 202000:00	–	cloudfoundry
CNVD	FFmpeg 'flv_write_packet' function denial of service vulnerability	24 Aug 201800:00	–	cnvd
Cvelist	CVE-2018-15822	23 Aug 201822:00	–	cvelist
Debian	[SECURITY] [DLA 1809-1] libav security update	29 May 201907:53	–	debian
Debian	[SECURITY] [DSA 4449-1] ffmpeg security update	22 May 201921:37	–	debian
Debian CVE	CVE-2018-15822	23 Aug 201822:00	–	debiancve
Tenable Nessus	Debian DLA-1809-1 : libav security update	30 May 201900:00	–	nessus
Tenable Nessus	Debian DSA-4449-1 : ffmpeg - security update	23 May 201900:00	–	nessus

NVD

Node

ffmpeg ffmpegRange≤2.8

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch18.10

canonical ubuntu_linuxMatch19.04

canonical ubuntu_linuxMatch20.04lts

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2019/05/msg00043.html
debian	www.debian.org/security/2019/dsa-4449
seclists	www.seclists.org/bugtraq/2019/May/60
usn	www.usn.ubuntu.com/4431-1/
github	www.github.com/FFmpeg/FFmpeg/commit/6b67d7f05918f7a1ee8fc6ff21355d7e8736aa10
usn	www.usn.ubuntu.com/3967-1/
github	www.github.com/FFmpeg/FFmpeg/commit/d8ecb335fe4852bbc172c7b79e66944d158b4d92

21 Nov 2024 03:51Current

7.5High risk

Vulners AI Score7.5

CVSS 25

CVSS 3.17.5

EPSS0.01442

CWE-617