4544 matches found
PT-2022-7785
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic vulnerability has been found in FFmpeg, affecting the decode pulses function. This issue leads to memory corruption and can be initiated remotely. Recommendations For FFmpeg version 2.0, it is...
PT-2022-7784
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue has been found, affecting the function lag decode frame. This issue leads to memory corruption and can be exploited remotely. Recommendations For FFmpeg version 2.0, it is recommended to apply a...
UBUNTU-CVE-2014-125017
A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpzadecodestream. The manipulation leads to memory corruption. The attack can be initiated remotely. The name of the patch is Fixes Invalid Writes. It is recommended to apply a patch to fix thi...
UBUNTU-CVE-2014-125004
A vulnerability has been found in FFmpeg 2.0 and classified as problematic. This vulnerability affects the function decodehextile of the file libavcodec/vmnc.c. The manipulation leads to memory corruption. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue...
CVE-2014-125010 FFmpeg h64.c decode_slice_header memory corruption
A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function decodesliceheader of the file libavcodec/h64.c. The manipulation leads to memory corruption. The attack may be launched remotely. It is recommended to apply a patch to fix this issue...
PT-2022-7765
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problematic issue was found in FFmpeg, affecting the decode vol header function of the file libavcodec/mpeg4videodec.c. The manipulation leads to memory corruption and can be initiated remotely. Recommendations...
PT-2022-7770
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical issue affects the function decode slice header of the file libavcodec/h64.c, leading to memory corruption. The attack can be launched remotely. Recommendations For FFmpeg version 2.0, apply a patch to...
FFmpeg buffer error vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...
FFmpeg buffer error vulnerability
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A code execution vulnerability exists in FFmpeg rpzadecodestream, which can be exploited by an attacker to trigger an out-of-bounds read memory access and execute arbitrary code on the syst...
PT-2022-7771
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A problem has been found in the decode frame function of the libavcodec/ansi.c file. This issue leads to an integer coercion error and can be exploited remotely. Recommendations To fix this issue, it is recommend...
PT-2022-7777
Name of the Vulnerable Software and Affected Versions FFmpeg version 2.0 Description A critical vulnerability was found in FFmpeg, affecting the rpza decode stream function. This issue leads to memory corruption and can be initiated remotely. The patch, named Fixes Invalid Writes, is intended to...
FFmpeg security vulnerabilities
FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A security vulnerability exists in FFmpeg version 2.0, which originates from a memory corruption via the decodeframe function in the libavcodec/ansi.c file...
OESA-2022-1710 python-jwt security update
PyJWT is a Python library which allows you to encode and decode JSON Web Tokens JWT. \ JWT is an open, industry-standard RFC 7519 for representing claims securely between two parties. Security Fixes: PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing...
EulerOS 2.0 SP5 : golang (EulerOS-SA-2022-1890)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to...
envoy: oauth filter calls continueDecoding() from within decodeHeaders()
A flaw was found in Envoy. The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions...
CVE-2022-29225: Uncontrolled Resource Consumption
Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed...
Oracle Linux 8 : go-toolset:ol8addon (ELSA-2022-14844)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-14844 advisory. go-toolset 1.17.10-1 - Set version to correspond to the matching build golang version - delve can be now added to aarch64 as well, remove ifarch. gola...
EulerOS 2.0 SP3 : php (EulerOS-SA-2022-1755)
According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexmlloadfile, URL-decode th...
