PT-2019-6177 · FFmpeg+4 · Ffmpeg+4
Publicado
2019-10-13
·
Atualizado
2023-01-02
·
CVE-2020-20892
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Ffmpeg version 4.2.1
Description
The issue is related to a division by zero in the
filter frame function of the libavfilter/vf lenscorrection.c component. This allows attackers to cause a Denial of Service or potentially gain access to confidential data, disrupt its integrity, and cause unspecified impacts. The vulnerability can be exploited by a remote attacker.Recommendations
For Ffmpeg version 4.2.1, consider disabling the
filter frame function in libavfilter/vf lenscorrection.c as a temporary workaround to minimize the risk of exploitation. Restrict access to sensitive data and ensure proper input validation to prevent potential disruptions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Ffmpeg
Suse
Ubuntu