Lucene search
HistoryNov 05, 2014 - 11:55 a.m.
CVE-2014-8542
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
libavcodec/utils.c in FFmpeg before 2.4.2 omits a certain codec ID during enforcement of alignment, which allows remote attackers to cause a denial of service (out-of-bounds access) or possibly have unspecified other impact via crafted JV data.
Affected configurations
Node
ffmpegffmpegRange≤2.4.1
Node
canonicalubuntu_linuxMatch12.04lts
Node
debiandebian_linuxMatch8.0
Related
veracode
veracode
Denial Of Service (DoS)
2017-02-06 01:47:25
prion
prion
Out-of-bounds
2014-11-05 11:55:00
cve
cve
CVE-2014-8542
2014-11-05 11:55:07
ubuntucve
ubuntucve
CVE-2014-8542
2014-11-05 00:00:00
debiancve
debiancve
CVE-2014-8542
2014-11-05 11:55:07
cvelist
cvelist
CVE-2014-8542
2014-11-05 11:00:00
nessus
nessus
Ubuntu 12.04 LTS : libav vulnerabilities (USN-2534-1)
2015-03-18 00:00:00
Debian DLA-1654-1 : libav security update
2019-02-07 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1654-1)
2019-02-05 00:00:00
Ubuntu: Security Advisory (USN-2534-1)
2015-03-18 00:00:00
Mageia: Security Advisory (MGASA-2014-0491)
2022-01-28 00:00:00
securityvulns
securityvulns
[USN-2534-1] Libav vulnerabilities
2015-03-18 00:00:00
libav / ffmpeg multiple security vulnerabilities
2015-03-18 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2015-03-17 00:00:00
debian
debian
[SECURITY] [DLA 1654-1] libav security update
2019-02-06 12:42:09
osv
osv
libav - security update
2019-01-31 00:00:00
mageia
mageia
Updated avidemux packages fix security vulnerabilities
2014-11-26 20:29:06
Updated ffmpeg packages fix security vulnerabilities
2014-11-21 15:44:16
freebsd
freebsd
ffmpeg -- multiple vulnerabilities
2015-03-12 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.3 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.2%
Related for NVD:CVE-2014-8542