CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

SUSE SLED15: libavcodec-devel / libavcodec57 / libavformat-devel / libavformat57 / etc (SUSE-SU-2021:3193-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3193-1 advisory. - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

USN-5472-1: FFmpeg vulnerabilities | Cloud Foundry

usn-5472-1 Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FFmpeg would attempt to divide by zero when using Linear Predictive Coding LPC or AAC codecs. An attacker could possibly use this issue to cause a denial of service. This...

SUSE: Security Advisory (SUSE-SU-2021:3193-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4998-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4998-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 31, 2021 https://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-4990-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4990-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4990-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 19, 2021 https://www.debian.org/security/faq -...

SUSE SLES15: libavcodec-devel / libavcodec57 / libavcodec57-32bit / etc (SUSE-SU-2021:3212-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3212-1 advisory. - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724. Tenable has extracted...

openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2021:3193-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:3212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2021:3212-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

OPENSUSE-SU-2021:3193-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

SUSE-SU-2021:3193-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2021-38171: Fixed adtsdecodeextradata in libavformat/adtsenc.c to check the initgetbits return value bsc1189724...

CVE-2021-38171

creationtimestamp| type| source ---|---|--- 2021-08-21 20:20:41+00:00| seen| https://t.me/cibsecurity/27666...

DEBIAN-CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

CVE-2021-38171

adtsdecodeextradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the initgetbits return value, which is a necessary step because the second argument to initgetbits can be crafted...

CVE-2021-38171

CVE-2021-38171 affects FFmpeg 4.4 and is described as adts_decode_extradata in libavformat/adtsenc.c not checking the return value of init_get_bits; the second argument to init_get_bits can be crafted. The connected documents confirm this as the root cause, noting that a crafted input could explo...