Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936082 advisory.

    Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts. (CVE-2020-20891)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0005-1 advisory.

    - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442).
    - CVE-2020-22042: Fixed a denial of service vulnerability led by a memory leak in the link_filter_inouts     function in libavfilter/graphparser.c. (bsc#1186761)
    - CVE-2021-38094: Fixed an integer overflow vulnerability in function filter_sobel in     libavfilter/vf_convolution.c (bsc#1190735).
    - CVE-2021-38093: Fixed an integer Overflow vulnerability in function filter_robert in     libavfilter/vf_convolution.c (bsc#1190734).
    - CVE-2021-38092: Fixed an Integer Overflow vulnerability in function filter_prewitt in     libavfilter/vf_convolution.c (bsc#1190733).
    - CVE-2020-22037: Fixed a denial of service vulnerability due to a memory leak in avcodec_alloc_context3     at options.c (bsc#1186756).
    - CVE-2021-3566: Fixed an exposure of sensitive information on ffmpeg version prior to 4.3 (bsc#1189166).
    - CVE-2020-35965: Fixed an out-of-bounds write in decode_frame in libavcodec/exr.c (bsc#1187852).
    - CVE-2020-20892: Fixed a division by zero in function filter_frame in libavfilter/vf_lenscorrection.c     (bsc#1190719).
    - CVE-2020-20891: Fixed a buffer overflow vulnerability in function config_input in libavfilter/vf_gblur.c     (bsc#1190718).
    - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name in     libavfilter/vf_avgblur.c (bsc#1190722).
    - CVE-2020-20896: Fixed a NULL pointer dereference in function latm_write_packet in libavformat/latmenc.c     (bsc#1190723).
    - CVE-2020-20899: Fixed a buffer overflow vulnerability in function config_props in libavfilter/vf_bwdif.c     (bsc#1190726).
    - CVE-2020-20902: Fixed an out-of-bounds read vulnerability in long_term_filter function in     g729postfilter.c (bsc#1190729).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3521-1 advisory.

    - CVE-2021-3566: Fixed information leak (bsc#1189166).
    - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)
    - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)
    - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)
    - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3()     (bsc#1186756)
    - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
    - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
    - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)
    - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)
    - CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
    - CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)
    - CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3521-1 advisory.

    - CVE-2021-3566: Fixed information leak (bsc#1189166).
    - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)
    - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)
    - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)
    - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3()     (bsc#1186756)
    - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
    - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
    - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)
    - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)
    - CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
    - CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)
    - CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
267569	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2025-936082)	Nessus	Unity Linux Local Security Checks	high
257710	Linux Distros Unpatched Vulnerability : CVE-2020-20891	Nessus	Misc.	high
169467	SUSE SLES15 Security Update : ffmpeg (SUSE-SU-2023:0005-1)	Nessus	SuSE Local Security Checks	high
154620	SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2021:3521-1)	Nessus	SuSE Local Security Checks	high
154611	openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3521-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2020-20891

high

Tenable Plugins

high

high

high

high

high