Описание
An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
A flaw was found in FFmpeg. An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component allows a remote attacker to cause a Denial of Service (DoS). By supplying a specially crafted input file, the attacker can trigger this flaw, leading to the application becoming unresponsive or crashing and disrupting service availability.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Lightspeed Core | openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | ffmpeg | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-aws-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-azure-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-cuda-gcp-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | redhat-user-workloads/bootc-rocm-azure-3-3 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-cuda-rhel9 | Fix deferred | ||
| Red Hat Enterprise Linux AI (RHEL AI) 3 | rhelai3/bootc-rocm-rhel9 | Fix deferred | ||
| Red Hat OpenShift AI (RHOAI) | rhoai/odh-vllm-gaudi-rhel9 | Fix deferred |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
5.3 Medium
CVSS3
Связанные уязвимости
An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
An improper resource deallocation and closure vulnerability in the too ...
An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input file.
Уязвимость утилиты zmqsend мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать отказ в обслуживании
5.3 Medium
CVSS3