Lucene search
UbuntuUSN-6983-1HistorySep 02, 2024 - 12:00 a.m.
FFmpeg vulnerability
2024-09-0200:00:00
ubuntu.com
5
ubuntu
lts
memory handling
video encoding
denial of service
arbitrary code
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
Releases
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 ESM
- Ubuntu 16.04 ESM
Packages
- ffmpeg - Tools for transcoding, streaming and playing of multimedia files
Details
Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during
video encoding. An attacker could possibly use this issue to perform a
denial of service, or execute arbitrary code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 24.04 | noarch | ffmpeg | < 7:6.1.1-3ubuntu5+esm2 | UNKNOWN |
| Ubuntu | 24.04 | noarch | ffmpeg | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | ffmpeg-dbgsym | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | ffmpeg-doc | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec-dev | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec-extra | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec-extra60 | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec-extra60-dbgsym | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec60 | < 7:6.1.1-3ubuntu5 | UNKNOWN |
| Ubuntu | 24.04 | noarch | libavcodec60-dbgsym | < 7:6.1.1-3ubuntu5 | UNKNOWN |
References
Related
osv
osv
Security update for ffmpeg
2024-08-07 10:02:37
CVE-2024-32230
2024-07-01 21:15:03
UBUNTU-CVE-2024-32230
2024-07-01 21:15:00
nvd
nvd
CVE-2024-32230
2024-07-01 21:15:03
debiancve
debiancve
CVE-2024-32230
2024-07-01 21:15:03
cve
cve
CVE-2024-32230
2024-07-01 21:15:03
ubuntucve
ubuntucve
CVE-2024-32230
2024-07-01 00:00:00
nessus
nessus
openvas
openvas
Ubuntu: Security Advisory (USN-6983-1)
2024-09-03 00:00:00
Debian: Security Advisory (DSA-5721-1)
2024-07-01 00:00:00
Debian: Security Advisory (DSA-5712-1)
2024-07-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-32230
2024-07-01 00:00:00
cvelist
cvelist
CVE-2024-32230
2024-07-01 00:00:00
redos
redos
ROS-20240927-01
2024-09-27 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
8
Confidence
Low
Related for USN-6983-1