Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2020-21697

A heap-use-after-free in the mpeg_mux_write_packet function in libavformat/mpegenc.c of FFmpeg 4.2 allows to cause a denial of service (DOS) via a crafted avi file.

Related bugs and status

CVE-2020-21697 (Candidate) is related to these bugs:

Bug #1970674: New bug fix releases 3.4.11, 4.2.7 and 4.4.2

		In	Importance	Status
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Focal)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Jammy)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Impish)	Undecided	Fix Released
1970674	New bug fix releases 3.4.11, 4.2.7 and 4.4.2	ffmpeg (Ubuntu Bionic)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://trac.ffmpeg.or...
DEBIAN: DSA-4998