Lucene search
Veracode Vulnerability DatabaseVERACODE:3438HistoryFeb 06, 2017 - 1:47 a.m.
Denial Of Service (DoS)
2017-02-0601:47:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.009 Low
EPSS
Percentile
83.2%
FFmpeg is vulnerable to denial of service (DoS) and possibly other attacks. These attacks are possible because utils.c removes a codec ID when enforcing alignment. This allows attackers to cause an out-of-bounds access error through JV data.
References
git.videolan.org/?p=ffmpeg.git;a=commit;h=105654e376a736d243aef4a1d121abebce912e6b
www.ffmpeg.org/security.html
www.ubuntu.com/usn/USN-2534-1
git.videolan.org/?p=ffmpeg.git;a=commit;h=105654e376a736d243aef4a1d121abebce912e6b
lists.debian.org/debian-lts-announce/2019/02/msg00005.html
security.gentoo.org/glsa/201603-06
www.ffmpeg.org/security.html
Related
cve
cve
CVE-2014-8542
2014-11-05 11:55:07
ubuntucve
ubuntucve
CVE-2014-8542
2014-11-05 00:00:00
debiancve
debiancve
CVE-2014-8542
2014-11-05 11:55:07
nvd
nvd
CVE-2014-8542
2014-11-05 11:55:07
prion
prion
Out-of-bounds
2014-11-05 11:55:00
cvelist
cvelist
CVE-2014-8542
2014-11-05 11:00:00
ubuntu
ubuntu
Libav vulnerabilities
2015-03-17 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2534-1)
2015-03-18 00:00:00
Debian: Security Advisory (DLA-1654-1)
2019-02-05 00:00:00
Mageia: Security Advisory (MGASA-2014-0464)
2022-01-28 00:00:00
debian
debian
[SECURITY] [DLA 1654-1] libav security update
2019-02-06 12:42:09
nessus
nessus
Debian DLA-1654-1 : libav security update
2019-02-07 00:00:00
Ubuntu 12.04 LTS : libav vulnerabilities (USN-2534-1)
2015-03-18 00:00:00
securityvulns
securityvulns
libav / ffmpeg multiple security vulnerabilities
2015-03-18 00:00:00
[USN-2534-1] Libav vulnerabilities
2015-03-18 00:00:00
osv
osv
libav - security update
2019-01-31 00:00:00
mageia
mageia
Updated avidemux packages fix security vulnerabilities
2014-11-26 20:29:06
Updated ffmpeg packages fix security vulnerabilities
2014-11-21 15:44:16
freebsd
freebsd
ffmpeg -- multiple vulnerabilities
2015-03-12 00:00:00
gentoo
gentoo
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00