CVE-2020-12284

Опубликовано: 28 апр. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

Ссылки

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19734
Exploit
Issue Tracking
Vendor Advisory
https://github.com/FFmpeg/FFmpeg/commit/1812352d767ccf5431aa440123e2e260a4db2726
Patch
Third Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/a3a3730b5456ca00587455004d40c047f7b20a99
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202007-58
Third Party Advisory
https://usn.ubuntu.com/4431-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4722
Third Party Advisory
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19734
Exploit
Issue Tracking
Vendor Advisory
https://github.com/FFmpeg/FFmpeg/commit/1812352d767ccf5431aa440123e2e260a4db2726
Patch
Third Party Advisory
https://github.com/FFmpeg/FFmpeg/commit/a3a3730b5456ca00587455004d40c047f7b20a99
Patch
Third Party Advisory
https://security.gentoo.org/glsa/202007-58
Third Party Advisory
https://usn.ubuntu.com/4431-1/
Third Party Advisory
https://www.debian.org/security/2020/dsa-4722
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ffmpeg:ffmpeg:4.1:*:*:*:*:*:*:*

cpe:2.3:a:ffmpeg:ffmpeg:4.2.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.06437

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2020-12284

CVSS3: 9.8

ubuntu

почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

CVE-2020-12284

CVSS3: 9.8

redhat

почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

CVE-2020-12284

CVSS3: 9.8

debian

почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2 ...

GHSA-qvcx-wpfr-c8wc

CVSS3: 9.8

github

больше 3 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

BDU:2020-02828

CVSS3: 9.8

fstec

около 6 лет назад

Уязвимость функции cbs_jpeg_split_fragment мультимедийной библиотеки Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 91%

0.06437

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-787