Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-12284

Опубликовано: 28 апр. 2020
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 10
CVSS3: 9.8

Описание

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

released

7:4.3-3ubuntu1
eoan

ignored

end of life
esm-apps/bionic

not-affected

code not present
esm-apps/focal

released

7:4.2.4-1ubuntu0.1
esm-apps/xenial

not-affected

code not present
esm-infra-legacy/trusty

DNE

focal

released

7:4.2.4-1ubuntu0.1
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 91%
0.06437
Низкий

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
redhat
почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

CVSS3: 9.8
nvd
почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

CVSS3: 9.8
debian
почти 6 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2 ...

CVSS3: 9.8
github
больше 3 лет назад

cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.

CVSS3: 9.8
fstec
около 6 лет назад

Уязвимость функции cbs_jpeg_split_fragment мультимедийной библиотеки Ffmpeg, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 91%
0.06437
Низкий

10 Critical

CVSS2

9.8 Critical

CVSS3