DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
ffmpeg: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-05-26
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen, vertrauliche Informationen offenzulegen oder beliebigen Code auszuführen.
01
beschreibt (8)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-22028US | medium6.5 | — | ||
Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_vertically_8 at libavfilter/vf_avgblur.c, which could cause a remote Denial of Service. | ||||
| CVE-2020-22026US | medium6.5 | — | ||
Buffer Overflow vulnerability exists in FFmpeg 4.2 in the config_input function at libavfilter/af_tremolo.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22024US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfun_frame16 function in libavfilter/vf_lagfun.c, which could let a remote malicious user cause Denial of Service. | ||||
| CVE-2020-22021US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22020US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22019US | medium6.5 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service. | ||||
| CVE-2020-22015US | high8.8 | — | ||
Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive inform… | ||||
| CVE-2020-24020US | high8.8 | — | ||
Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnn_execute_layer_pad in libavfilter/dnn/dnn_backend_native_layer_pad.c due to a call to memcpy without length checks, which could… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Debian Security Advisory DLA-2742 vom 2021-08-15external
- openSUSE Security Update OPENSUSE-SU-2025:14880-1 vom 2025-03-13external
- SUSE Security Update SUSE-SU-2021:2322-1 vom 2021-07-14external
- SUSE Security Update SUSE-SU-2021:2929-1 vom 2021-09-02external
- SUSE Security Update SUSE-SU-2024:1909-1 vom 2024-06-03external
- SUSE Security Update SUSE-SU-2024:1907-1 vom 2024-06-03external
- SUSE Security Update SUSE-SU-2025:0958-1 vom 2025-03-19external
- NIST - NATIONAL VULNERABILITY DATABASE vom 2021-05-26external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan