PT-2019-6196 · FFmpeg+5 · Ffmpeg+5

CVE-2020-20898

·

Publicado

2019-10-13

·

Atualizado

2024-04-29

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Ffmpeg version 4.2.1
Description The issue is related to an Integer Overflow vulnerability in the filter16 prewitt function within the libavfilter/vf convolution.c component of the Ffmpeg library. This vulnerability can be exploited by a remote attacker to cause a Denial of Service or gain access to confidential data, compromise its integrity.
Recommendations For Ffmpeg version 4.2.1, consider applying a patch or updating to a newer version that addresses the Integer Overflow vulnerability in the filter16 prewitt function, if available. As a temporary workaround, consider restricting access to the libavfilter/vf convolution.c component to minimize the risk of exploitation.

Exploit

Correção

DoS

Integer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

ALT-PU-2020-1014
ALT-PU-2020-2032
BDU:2022-02073
CVE-2020-20898
OPENSUSE-SU-2024_1468-1
SUSE-SU-2024:1468-1
USN-6449-1
USN-6449-2

Produtos afetados

Alt Linux
Astra Linux
Ffmpeg
Linuxmint
Suse
Ubuntu