Denial Of Service (DoS)

2021-06-0510:10:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

55.2%

JSON

ffmpeg:bullseye is vulnerable denial of service. A heap-based Buffer Overflow vulnerability exists FFmpeg at libavfilter/vf_edgedetect.c in gaussian_blur, which might lead to memory corruption and other potential consequences.

CPENameOperatorVersion
ffmpeg:bullseyeeq7:4.3.1-5
ffmpeg:sideq7:4.3.1-5
ffmpeg:stretcheq7:3.2.14-1~deb9u1
ffmpeg:bustereq7:4.1.6-1~deb10u1
ffmpeg:focaleq7:4.2.2-1ubuntu1
ffmpeg:focaleq7:4.2.4-1ubuntu0.1
ffmpeg:bioniceq7:3.4.2-2
ffmpeg:bioniceq7:3.4.8-0ubuntu0.2
ffmpeg:bullseyeeq7:4.3.1-5
ffmpeg:sideq7:4.3.1-5

Name	Operator	Version
ffmpeg:bullseye	eq	7:4.3.1-5
ffmpeg:sid	eq	7:4.3.1-5
ffmpeg:stretch	eq	7:3.2.14-1~deb9u1
ffmpeg:buster	eq	7:4.1.6-1~deb10u1
ffmpeg:focal	eq	7:4.2.2-1ubuntu1
ffmpeg:focal	eq	7:4.2.4-1ubuntu0.1
ffmpeg:bionic	eq	7:3.4.2-2
ffmpeg:bionic	eq	7:3.4.8-0ubuntu0.2
ffmpeg:bullseye	eq	7:4.3.1-5
ffmpeg:sid	eq	7:4.3.1-5