SUSE-SU-2018:2305-1: ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:2305-1 is a vulnerability in ffmpeg&distro=SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 10-08-2018
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for ffmpeg This update for ffmpeg fixes the following issues: Security issues fixed: - CVE-2018-13302: Fixed out of array access issue (bsc#1100356). - CVE-2018-1999010: Fixed multiple out of array access vulnerabilities in the mms protocol that could result in accessing out of bound data via specially crafted input files (bnc#1102899) - CVE-2018-1999011: Fixed a heap buffer overflow in asf_o format demuxer that could result in remote code execution (bnc#1102689) - CVE-2018-1999012: Fixed an infinite loop vulnerability in pva format demuxer that could result in excessive amount of ressource allocation like CPU an RAM (CVE-2018-1999012 bnc#1102688). - CVE-2018-1999013: Fixed an use-after-free vulnerability in the realmedia demuxer that could allow remote attackers to read heap memory (bnc#1102687)

No weakness data has been published for this record.