Denial Of Service (DoS)

2021-01-1402:12:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.003 Low

EPSS

Percentile

68.2%

JSON

track_header is vulnerable to denial of service. An out-of-bounds write in libavformat/vividas.c due to incorrect extradata packing allows an attacker to crash the application.

CPENameOperatorVersion
ffmpeg:sideq7:4.3.1-5
ffmpeg:bullseyeeq7:4.3.1-5
ffmpeg:3.13eq4.3.1-r3
ffmpeg:3.13eq4.3.1-r4
ffmpeg:edgeeq4.2.3-r1
ffmpeg:edgeeq4.2.2-r2
ffmpeg:edgeeq4.2.2-r1
ffmpeg:hirsuteeq7:4.3.1-5ubuntu1
ffmpeg:focaleq7:4.2.2-1ubuntu1
ffmpeg:focaleq7:4.2.4-1ubuntu0.1

Name	Operator	Version
ffmpeg:sid	eq	7:4.3.1-5
ffmpeg:bullseye	eq	7:4.3.1-5
ffmpeg:3.13	eq	4.3.1-r3
ffmpeg:3.13	eq	4.3.1-r4
ffmpeg:edge	eq	4.2.3-r1
ffmpeg:edge	eq	4.2.2-r2
ffmpeg:edge	eq	4.2.2-r1
ffmpeg:hirsute	eq	7:4.3.1-5ubuntu1
ffmpeg:focal	eq	7:4.2.2-1ubuntu1
ffmpeg:focal	eq	7:4.2.4-1ubuntu0.1