SUSE-SU-2023:0005-1: ffmpeg&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2023:0005-1 is a vulnerability in ffmpeg&distro=SUSE Enterprise Storage 6 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 14 · Downstream 0 · Related 14Timeline
- 02-01-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for ffmpeg This update for ffmpeg fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442). - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts function in libavfilter/graphparser.c. (bsc#1186761) - CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c (bsc#1190735). - CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c (bsc#1190734). - CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c (bsc#1190733). - CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3 at options.c (bsc#1186756). - CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166). - CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852). - CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c (bsc#1190719). - CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c (bsc#1190718). - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in libavfilter/vf_avgblur.c (bsc#1190722). - CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c (bsc#1190723). - CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c (bsc#1190726). - CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in g729postfilter.c (bsc#1190729).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse10 products
- ffmpeg&distro=SUSE Enterprise Storage 6< 3.4.2-150000.4.44.1
- ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 3.4.2-150000.4.44.1
- ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 3.4.2-150000.4.44.1
- ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 3.4.2-150000.4.44.1
- ffmpeg&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 3.4.2-150000.4.44.1
1 vendor · 10 products