Debian DSA-4990-1 : ffmpeg - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4990 advisory. - FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service. CVE-2020-20445 - FFmpe...

[SECURITY] [DSA 4990-1] ffmpeg security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4990-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 19, 2021 https://www.debian.org/security/faq -...

ffmpeg:ffmpeg_dem_FLAC_fuzzer: Heap-buffer-overflow in frame_header_is_valid

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4805686811295744 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegdemFLACfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x633000052800 Cras...

Denial Of Service (DoS)

FFmpeg is vulnerable to denial of service. The vulnerability exists due to a Divide By Zero issue via libavcodec/ratecontrol.c...

DSA-4990-1 ffmpeg - security update

Bulletin has no description...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEX_fuzzer: Segv on unknown address in ff_vector_fmul_scalar_sse

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6713285764841472 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDSPEEXfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Segv on unknown address Crash Address: Cras...

ffmpeg:ffmpeg_AV_CODEC_ID_SPEEX_fuzzer: Heap-buffer-overflow in nb_decode

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4766419250708480 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSPEEXfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x619000000e8...

ffmpeg:ffmpeg_AV_CODEC_ID_ARGO_fuzzer: Heap-buffer-overflow in decode_frame

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4820016722214912 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDARGOfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address:...

openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2021:3293-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE SLED15: ffmpeg / libavcodec-devel / libavcodec57 / libavdevice57 / etc (SUSE-SU-2021:3293-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3293-1 advisory. - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the linkfilterinouts function in libavfilter/graphparser.c...

openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3293-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:3293-1 advisory. - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the linkfilterinouts function in...

OPENSUSE-SU-2021:3293-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the linkfilterinouts function in libavfilter/graphparser.c. bsc1186761...

ffmpeg:ffmpeg_AV_CODEC_ID_THEORA_fuzzer: Crash in ff_emu_edge_vfix12_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5925660741206016 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTHEORAfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x71b7f166a07...

Security update for ffmpeg (moderate)

openSUSE Security Update: Security update for ffmpeg Announcement ID: openSUSE-SU-2021:3293-1 Rating: moderate References: 1186761 Cross-References: CVE-2020-22042 CVSS scores: CVE-2020-22042 NVD : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2020-22042 SUSE: 6.5...

CVE-2021-35504

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

CVE-2021-35504

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

Remote code execution

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

CVE-2021-35504

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

CVE-2021-35504

Afian FileRun 2021.03.26 allows Remote Code Execution by administrators via the Check Path value for the ffmpeg binary...

CVE-2021-35504

CVE-2021-35504 affects Afian FileRun 2021.03.26 and enables Remote Code Execution (RCE) via the Check Path value used for the ffmpeg binary. The Red Hat and CVE/NVD entries confirm the vulnerability exists in that FileRun release and describe the root cause as improper handling of the ffmpeg bina...