SUSE-SU-2023:0005-1: ffmpeg&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise

CVSS: UnknownPublished
Published 02-01-2023Last modified 04-02-2026

Vulnerability summary

SUSE-SU-2023:0005-1 is a vulnerability in ffmpeg&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 14 · Downstream 0 · Related 14

Timeline

  1. 02-01-2023
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442). - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761) - CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735). - CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734). - CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733). - CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756). - CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166). - CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852). - CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719). - CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718). - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722). - CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723). - CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726). - CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse10 products
  • ffmpeg&distro=SUSE Enterprise Storage 6< 3.4.2-150000.4.44.1
  • ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 3.4.2-150000.4.44.1
  • ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 3.4.2-150000.4.44.1
  • ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 3.4.2-150000.4.44.1
  • ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 3.4.2-150000.4.44.1

1 vendor · 10 products

References

29 links
Show all 29 references