track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect
    extradata packing. (CVE-2020-35964)

  - decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in
    calculations of when to perform memset zero operations. (CVE-2020-35965)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - adts_decode_extradata in libavformat/adtsenc.c in FFmpeg 4.4 does not check the init_get_bits return
    value, which is a necessary step because the second argument to init_get_bits can be crafted.
    (CVE-2021-38171)

  - FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aacpsy.c, which allows a remote malicious
    user to cause a Denial of Service. (CVE-2020-20446)

  - FFmpeg 4.2 is affected by null pointer dereference passed as argument to libavformat/aviobuf.c, which
    could cause a Denial of Service. (CVE-2020-20450)

  - FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious
    user to cause a Denial of Service (CVE-2020-20453)

  - Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in
    libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Denial
    of Service, or execute arbitrary code. (CVE-2020-22015)

The remote host is affected by the vulnerability described in GLSA-202105-24 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted media       file using FFmpeg, possibly resulting in execution of arbitrary code with       the privileges of the process or a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
426726	Alpine: ffmpeg4: security update to 4.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
426726	Alpine: ffmpeg4: security update to 4.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
404325	Alpine: multiple ffmpeg packages: security update to 4.3.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404325	Alpine: multiple ffmpeg packages: security update to 4.3.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
404324	Alpine: multiple ffmpeg packages: security update to 4.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
404324	Alpine: multiple ffmpeg packages: security update to 4.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
156993	GLSA-202105-24 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2020-35964

medium

Tenable Plugins

high

high

critical

critical

high

high

high