Lucene search

DebianDEBIAN:DSA-4998-1:E8CBA

HistoryOct 31, 2021 - 4:40 p.m.

[SECURITY] [DSA 4998-1] ffmpeg security update

2021-10-3116:40:22

lists.debian.org

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.8%

JSON

Debian Security Advisory DSA-4998-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
October 31, 2021 https://www.debian.org/security/faq

Package : ffmpeg
CVE ID : CVE-2020-20446 CVE-2020-20450 CVE-2020-20453 CVE-2020-22037
CVE-2020-22042 CVE-2021-38114 CVE-2021-38171 CVE-2021-38291
CVE-2020-21697 CVE-2020-21688 CVE-2020-20445

Several vulnerabilities have been discovered in the FFmpeg multimedia
framework, which could result in denial of service or potentially the
execution of arbitrary code if malformed files/streams are processed.

For the stable distribution (bullseye), these problems have been fixed in
version 7:4.3.3-0+deb11u1.

We recommend that you upgrade your ffmpeg packages.

For the detailed security status of ffmpeg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/ffmpeg

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian10amd64ffmpeg-dbgsym< 7:4.1.8-0+deb10u1ffmpeg-dbgsym_7:4.1.8-0+deb10u1_amd64.deb
Debian11s390xlibswresample-dev< 7:4.3.3-0+deb11u1libswresample-dev_7:4.3.3-0+deb11u1_s390x.deb
Debian10i386libavcodec58-dbgsym< 7:4.1.8-0+deb10u1libavcodec58-dbgsym_7:4.1.8-0+deb10u1_i386.deb
Debian11arm64libavcodec-extra58-dbgsym< 7:4.3.3-0+deb11u1libavcodec-extra58-dbgsym_7:4.3.3-0+deb11u1_arm64.deb
Debian10i386libavcodec58< 7:4.1.8-0+deb10u1libavcodec58_7:4.1.8-0+deb10u1_i386.deb
Debian10mipsellibavcodec-extra58< 7:4.1.8-0+deb10u1libavcodec-extra58_7:4.1.8-0+deb10u1_mipsel.deb
Debian9i386ffmpeg< 7:3.2.16-1+deb9u1ffmpeg_7:3.2.16-1+deb9u1_i386.deb
Debian11armhflibavformat58-dbgsym< 7:4.3.3-0+deb11u1libavformat58-dbgsym_7:4.3.3-0+deb11u1_armhf.deb
Debian10mipselffmpeg-dbgsym< 7:4.1.8-0+deb10u1ffmpeg-dbgsym_7:4.1.8-0+deb10u1_mipsel.deb
Debian10mipslibpostproc55-dbgsym< 7:4.1.8-0+deb10u1libpostproc55-dbgsym_7:4.1.8-0+deb10u1_mips.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	amd64	ffmpeg-dbgsym	< 7:4.1.8-0+deb10u1	ffmpeg-dbgsym_7:4.1.8-0+deb10u1_amd64.deb
Debian	11	s390x	libswresample-dev	< 7:4.3.3-0+deb11u1	libswresample-dev_7:4.3.3-0+deb11u1_s390x.deb
Debian	10	i386	libavcodec58-dbgsym	< 7:4.1.8-0+deb10u1	libavcodec58-dbgsym_7:4.1.8-0+deb10u1_i386.deb
Debian	11	arm64	libavcodec-extra58-dbgsym	< 7:4.3.3-0+deb11u1	libavcodec-extra58-dbgsym_7:4.3.3-0+deb11u1_arm64.deb
Debian	10	i386	libavcodec58	< 7:4.1.8-0+deb10u1	libavcodec58_7:4.1.8-0+deb10u1_i386.deb
Debian	10	mipsel	libavcodec-extra58	< 7:4.1.8-0+deb10u1	libavcodec-extra58_7:4.1.8-0+deb10u1_mipsel.deb
Debian	9	i386	ffmpeg	< 7:3.2.16-1+deb9u1	ffmpeg_7:3.2.16-1+deb9u1_i386.deb
Debian	11	armhf	libavformat58-dbgsym	< 7:4.3.3-0+deb11u1	libavformat58-dbgsym_7:4.3.3-0+deb11u1_armhf.deb
Debian	10	mipsel	ffmpeg-dbgsym	< 7:4.1.8-0+deb10u1	ffmpeg-dbgsym_7:4.1.8-0+deb10u1_mipsel.deb
Debian	10	mips	libpostproc55-dbgsym	< 7:4.1.8-0+deb10u1	libpostproc55-dbgsym_7:4.1.8-0+deb10u1_mips.deb