Debian dsa-5985 : ffmpeg - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5985 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5985-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2017-9996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cdxldecodeframe function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before...

Linux Distros Unpatched Vulnerability : CVE-2015-6823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The allocatebuffers function in libavcodec/alac.c in FFmpeg before 2.7.2 does not initialize certain context data, which allows remote attackers to cause a deni...

Linux Distros Unpatched Vulnerability : CVE-2015-1872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffmjpegdecodesof function in libavcodec/mjpegdec.c in FFmpeg before 2.5.4 does not validate the number of components in a JPEG-LS Start Of Frame segment,...

Linux Distros Unpatched Vulnerability : CVE-2017-7865

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideodecodeblockopcode0xA function in...

Linux Distros Unpatched Vulnerability : CVE-2018-1999013

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2015-1208

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow in the movreaddefault function in libavformat/mov.c in FFmpeg before 2.4.6 allows remote attackers to obtain sensitive information from heap...

Linux Distros Unpatched Vulnerability : CVE-2012-6617

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The preparesdpdescription function in ffserver.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service crash via vectors related to the rt...

Linux Distros Unpatched Vulnerability : CVE-2015-6826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffrv34decodeinitthreadcopy function in libavcodec/rv34.c in FFmpeg before 2.7.2 does not initialize certain structure members, which allows remote attackers...

Linux Distros Unpatched Vulnerability : CVE-2016-10192

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in ffserver.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2016-10190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3.2.x before 3.2.2 allows remote web serve...

Linux Distros Unpatched Vulnerability : CVE-2018-13301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ffmpeg4decodepictureheader function in libavcodec/mpeg4videodec.c may trigger ...

Linux Distros Unpatched Vulnerability : CVE-2015-6821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffmpvcommoninit function in libavcodec/mpegvideo.c in FFmpeg before 2.7.2 does not properly maintain the encoding context, which allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2012-6618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The avprobeinputbuffer function in libavformat/utils.c in FFmpeg before 1.0.2, when running with certain -probesize values, allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2012-6615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ffasssplitoverridecodes function in libavcodec/asssplit.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service NULL pointer dereferen...

Linux Distros Unpatched Vulnerability : CVE-2015-6824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The swsinitcontext function in libswscale/utils.c in FFmpeg before 2.7.2 does not initialize certain pixbuf data structures, which allows remote attackers to...

Linux Distros Unpatched Vulnerability : CVE-2012-6616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The movtextdecodeframe function in libavcodec/movtextdec.c in FFmpeg before 1.0.2 allows remote attackers to cause a denial of service out-of-bounds read and...

Linux Distros Unpatched Vulnerability : CVE-2017-9993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extension...

ffmpeg:ffmpeg_AV_CODEC_ID_TIFF_DEC_fuzzer: Heap-buffer-overflow in exif_parse_ifd_list

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=6689620256686080 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDTIFFDECfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg:ffmpeg_AV_CODEC_ID_SANM_fuzzer: Global-buffer-overflow in old_codec37

Project: https://git.ffmpeg.org/ffmpeg.git https://github.com/FFmpeg/FFmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4900348960768000 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDSANMfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type:...