Denial Of Service (DoS)

🗓️ 17 Jul 2018 03:11:28Reported by Veracode Vulnerability DatabaseType

ffmpeg vulnerability denial of service attack handling multiple substream

Reporter	Title	Published	Views	Family All 30
ATTACKERKB	CVE-2018-13302	5 Jul 201817:29	–	attackerkb
AlpineLinux	CVE-2018-13302	5 Jul 201817:00	–	alpinelinux
BDU FSTEC	The vulnerability of the handle_eac3 function in the framework for working with FFmpeg formats allows a attacker to cause a service failure or execute arbitrary code.	5 Feb 201900:00	–	bdu_fstec
CNVD	FFmpeg 'handle_eac3' function out-of-bounds access vulnerability	6 Jul 201800:00	–	cnvd
CVE	CVE-2018-13302	5 Jul 201817:00	–	cve
Cvelist	CVE-2018-13302	5 Jul 201817:00	–	cvelist
Debian	[SECURITY] [DSA 4249-1] ffmpeg security update	17 Jul 201820:41	–	debian
Debian CVE	CVE-2018-13302	5 Jul 201817:00	–	debiancve
Tenable Nessus	Debian DSA-4249-1 : ffmpeg - security update	18 Jul 201800:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2018:2305-1)	2 Jan 201900:00	–	nessus

Vulners

Node

ffmpeg ffmpegMatch2.1.5-r1objectivec

AND

ffmpeg ffmpegMatch3.0.7-r0objectivec

AND

ffmpeg ffmpegMatch3.4-r1objectivec

AND

ffmpeg ffmpegMatch3.2.9-r0objectivec

AND

ffmpeg ffmpegMatch2.6.9-r0objectivec

AND

ffmpeg ffmpegMatch2.8.11-r0objectivec

AND

ffmpeg ffmpegMatch3.1.11-r1objectivec

AND

ffmpeg ffmpegMatch0.10.9-r0objectivec

AND

ffmpeg ffmpegMatch2.3.5-r0objectivec

AND

ffmpeg ffmpegMatch1.1.14-r0objectivec

AND

ffmpeg ffmpegMatch1.2.8-r0objectivec

AND

xenial xenialMatch7:2.8.6-1ubuntu2debian

AND

google bionicMatch7:3.4.2-2debian

AND

ffmpeg ffmpegRange2.1–2.8.3objectivec

Source	Link
securityfocus	www.securityfocus.com/bid/104675
github	www.github.com/FFmpeg/FFmpeg/commit/ed22dc22216f74c75ee7901f82649e1ff725ba50
securityfocus	www.securityfocus.com/bid/104675
debian	www.debian.org/security/2018/dsa-4249

03 Oct 2019 07:25Current

8.2High risk

Vulners AI Score8.2

CVSS 26.8

CVSS 38.8

EPSS0.0221