PT-2019-6402 · FFmpeg+4 · Ffmpeg+4
Publicado
2019-08-26
·
Atualizado
2022-06-13
·
CVE-2020-20451
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
FFmpeg version 4.2
Description
The issue is related to a component of the FFmpeg multimedia library, specifically fftools/cmdutils.c, which is associated with incorrect memory deallocation before removing the last reference. This allows a remote attacker to cause a denial of service. The problem stems from resource management errors.
Recommendations
For FFmpeg version 4.2, consider applying configuration changes or workarounds to minimize the risk of exploitation, such as restricting access to resources that could be affected by the denial of service issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Ffmpeg
Suse
Ubuntu