SUSE-SU-2019:3184-2: ffmpeg&distro=SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 07-07-2020Last modified 02-05-2025
Open JSON

Vulnerability summary

SUSE-SU-2019:3184-2 is a vulnerability in ffmpeg&distro=SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 4 · Downstream 0 · Related 4
CVE-2018-13301CVE-2019-12730CVE-2019-17542CVE-2019-9718

Timeline

  1. 07-07-2020
    PublishedVulnerability first disclosed.
  2. 02-05-2025
    Last modifiedVulnerability information updated.

Description

Security update for ffmpeg This update for ffmpeg fixes the following issues: Security issues fixed: - CVE-2019-17542: Fixed a heap-buffer overflow in vqa_decode_chunk due to an out-of-array access (bsc#1154064). - CVE-2019-12730: Fixed an uninitialized use of variables due to an improper check (bsc#1137526). - CVE-2019-9718: Fixed a denial of service in the subtitle decode (bsc#1129715). - CVE-2018-13301: Fixed a denial of service while converting a crafted AVI file to MPEG4 (bsc#1100352).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse1 product
  • ffmpeg&distro=SUSE Linux Enterprise Module for Package Hub 15 SP1< 3.4.2-4.27.1

1 vendor · 1 product

References

9 links