Lucene search
+L

165 matches found

UbuntuCve
UbuntuCve
•added 2021/06/01 8:15 p.m.•30 views

CVE-2020-22043

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

6.5CVSS6.6AI score0.01039EPSS
SaveExploits1References4
CVE
CVE
•added 2021/06/01 7:57 p.m.•217 views

CVE-2020-22043

CVE-2020-22043 is a Denial of Service vulnerability in FFmpeg 4.2 caused by a memory leak in libavutil/fifo.c (fifo_alloc_common). Connected advisories confirm the issue affects FFmpeg 4.2 and have been fixed in OpenSUSE/SUSE advisories (SUSE-SU-2021:2322-1) and Ubuntu USN-6430-1, indicating a pa...

6.5CVSS6.2AI score0.01039EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/06/01 7:57 p.m.•9 views

CVE-2020-22043

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

7.1CVSS0.01039EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/01 12:00 a.m.•6 views

CVE-2020-22043: Missing Release of Memory after Effective Lifetime

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c...

6.5CVSS6.1AI score0.01039EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/06/01 12:00 a.m.•28 views

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which originates from a memory leak in the fifoalloccommon function in libavutil/fifo.c. The vulnerability can be exploited to cause a denial of service. An attacker c...

6.5CVSS5.7AI score0.01039EPSS
SaveExploits1References5
Veracode
Veracode
•added 2020/05/10 11:26 p.m.•42 views

Arbitrary Code Execution

ffmpeg is vulnerable to arbitrary code execution. The vulnerability exists as the avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring...

8.8CVSS5.1AI score0.02568EPSS
SaveExploits0References4Affected Software1
osv_debian
osv_debian
•added 2020/01/14 4:15 p.m.•16 views

DEBIAN-CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS8.9AI score0.04468EPSS
SaveExploits1References1
NVD
NVD
•added 2020/01/14 4:15 p.m.•26 views

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS8.9AI score0.05739EPSS
SaveExploits1References3
Prion
Prion
•added 2020/01/14 4:15 p.m.•28 views

Integer overflow

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

6.8CVSS8.3AI score0.04468EPSS
SaveExploits1References3Affected Software1
UbuntuCve
UbuntuCve
•added 2020/01/14 4:15 p.m.•45 views

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS7.7AI score0.04468EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2020/01/14 4:15 p.m.•14 views

UBUNTU-CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS7.8AI score0.05739EPSS
SaveExploits1References4
Mend
Mend
•added 2020/01/14 3:41 p.m.•9 views

CVE-2014-4609

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS0.05739EPSS
SaveExploits1References4
CVE
CVE
•added 2020/01/14 3:41 p.m.•105 views

CVE-2014-4609

CVE-2014-4609 : Libav’s get_len in libavutil/lzo.c has an integer overflow when processing Literal Runs, allowing remote code execution. Affected are Libav releases before 0.8.13, 9.x before 9.14, and 10.x before 10.2. Impact includes remote code execution with potential impact on confidentiality...

8.8CVSS8.8AI score0.05739EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2020/01/14 3:41 p.m.•91 views

CVE-2014-4610

CVE-2014-4610 concerns an integer overflow in FFmpeg’s libavutil/lzo.c get_len, which allows remote attackers to execute arbitrary code via a crafted Literal Run. Public references enumerate affected FFmpeg branches: before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1...

8.8CVSS8.8AI score0.04468EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2020/01/14 3:41 p.m.•47 views

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.9AI score0.04468EPSS
SaveExploits1References3
Mend
Mend
•added 2020/01/14 3:41 p.m.•8 views

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS0.04468EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2020/01/14 3:41 p.m.•59 views

CVE-2014-4610

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS9AI score0.04468EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/14 12:00 a.m.•6 views

CVE-2014-4609: Integer Overflow or Wraparound

Integer overflow in the getlen function in libavutil/lzo.c in Libav before 0.8.13, 9.x before 9.14, and 10.x before 10.2 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS8.5AI score0.05739EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/01/14 12:00 a.m.•5 views

PT-2020-7678

Name of the Vulnerable Software and Affected Versions Libav versions prior to 0.8.13 Libav versions 9.x prior to 9.14 Libav versions 10.x prior to 10.2 Description The issue is related to an integer overflow in the get len function in libavutil/lzo.c, which allows remote attackers to execute...

8.8CVSS0.05739EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/14 12:00 a.m.•6 views

CVE-2014-4610: Integer Overflow or Wraparound

Integer overflow in the getlen function in libavutil/lzo.c in FFmpeg before 0.10.14, 1.1.x before 1.1.12, 1.2.x before 1.2.7, 2.0.x before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.4 allows remote attackers to execute arbitrary code via a crafted Literal Run...

8.8CVSS8.6AI score0.04468EPSS
SaveExploits1References2
Rows per page
Query Builder