USN-4431-1: FFmpeg vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to cause a denial of service via a crafted file. This issue only affected...

GLSA-202007-58 : FFmpeg: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202007-58 FFmpeg: Multiple vulnerabilities Multiple vulnerabilities have been discovered in FFmpeg. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : FFmpeg vulnerabilities (USN-4431-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4431-1 advisory. It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to...

USN-4431-1: FFmpeg vulnerabilities

It was discovered that FFmpeg incorrectly verified empty audio packets or HEVC data. An attacker could possibly use this issue to cause a denial of service via a crafted file. This issue only affected Ubuntu 16.04 LTS, as it was already fixed in Ubuntu 18.04 LTS. For more information see:...

Security fix for the ALT Linux 9 package ffmpeg version 2:4.2.3-alt1

2:4.2.3-alt1 built May 28, 2020 Anton Farygin in task 252247 --- May 25, 2020 Anton Farygin - 4.2.3 Fixes: CVE-2019-13312,CVE-2020-12284...

CVE-2019-13312

creationtimestamp| type| source ---|---|--- 2019-07-05 04:00:15+00:00| seen| https://t.me/cveNotify/234...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

blockcmp in libavcodec/zmbvenc.c in FFmpeg 4.1.3 has a heap-based buffer over-read...

CVE-2019-13312

CVE-2019-13312 affects FFmpeg 4.1.3, where block_cmp() in libavcodec/zmbvenc.c can trigger a heap-based buffer over-read. This is evidenced across multiple advisories (ALT Linux fix 4.2.3-alt1 and Gentoo GLSA 202003-65 recommending upgrading to FFmpeg 4.2.x or newer). Impact per sources is partia...