Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.

Affected: openEuler:20.03-LTS-SP4: ffmpeg

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fix(es):

FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which could cause a Denial of Service.(CVE-2020-20450)

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.(CVE-2020-20451)

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at ff_fill_rectangle in libavfilter/drawutils.c, which might lead to memory corruption and other potential consequences.(CVE-2020-22017)

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 in filter_frame at libavfilter/vf_fieldorder.c, which might lead to memory corruption and other potential consequences.(CVE-2020-22022)

A heap-based Buffer Overflow vulnerability exists in gaussian_blur at libavfilter/vf_edgedetect.c, which might lead to memory corruption and other potential consequences.(CVE-2020-22025)

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/vf_colorconstancy.c: in slice_get_derivative, which crossfade_samples_fltp, which might lead to memory corruption and other potential consequences.(CVE-2020-22029)

A heap-based Buffer Overflow vulnerability exists in FFmpeg 4.2 at libavfilter/af_afade.c in crossfade_samples_fltp, wh…

Security update for ffmpeg

Security update for ffmpeg

Affected: Ubuntu:Pro:16.04:LTS: ffmpeg, Ubuntu:18.04:LTS: ffmpeg, Ubuntu:20.04:LTS: ffmpeg

Denial of Service issue in FFmpeg 4.2 due to resource management errors via fftools/cmdutils.c.