Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2020-2361

Высокий

ALT-PU-2020-2361: package ffmpeg update to version 4.3.1-alt1

Источник
errata.altlinux.org
Дата публикации
14.07.2020
Дата обновления
14.07.2020
Устраненные уязвимости
6

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades ffmpeg to version 4.3.1-alt1.

Устраненные уязвимости6

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 6 лет назад

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

CVSS3: 5.5
nvd
больше 6 лет назад

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

CVSS3: 5.5
debian
больше 6 лет назад

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duratio ...

CVSS3: 5.5
github
больше 4 лет назад

FFmpeg 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

CVSS3: 6.5
fstec
больше 6 лет назад

Уязвимость функции parse_playlist библиотеки libavformat мультимедийной среды Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании