Ubuntu.comUB:CVE-2020-20896CVE-2020-20896
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
59.0%
An issue was discovered in function latm_write_packet in
libavformat/latmenc.c in Ffmpeg 4.2.1, allows attackers to cause a Denial
of Service or other unspecified impacts due to a Null pointer dereference.
Notes
| Author | Note |
|---|---|
| ccdm94 | Xenial seems to not be vulnerable to this issue. The commit that introduces the code addressed in the fix commit (dd01947397b) is 8b3ec51de8a (3.4). In this commit, the lines that were added in the fix were removed. The package code in Xenial does not include the changes added by 8b3ec51de8a, and therefore, code reintroduced by the fix to this CVE is already present. |
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
59.0%