The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts. (CVE-2020-20891)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3521-1 advisory.

    - CVE-2021-3566: Fixed information leak (bsc#1189166).
    - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734)
    - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733)
    - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735)
    - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3()     (bsc#1186756)
    - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852)
    - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719)
    - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718)
    - CVE-2020-20895: Fixed a buffer overflow vulnerability in function filter_vertically_##name (bsc#1190722)
    - CVE-2020-20896: Fixed an issue with latm_write_packet() (bsc#1190723)
    - CVE-2020-20899: Fixed a buffer overflow vulnerability in config_props() (bsc#1190726)
    - CVE-2020-20902: Fixed an out-of-bounds read vulnerabilit long_term_filter() (bsc#1190729)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3521-1 advisory.

  - Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts. (CVE-2020-20891)

  - An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero.
    (CVE-2020-20892)

  - An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
    (CVE-2020-20896)

  - A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in     FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could     result in disclosure of information. (CVE-2020-20902)

  - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at     options.c. (CVE-2020-22037)

  - decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in     calculations of when to perform memset zero operations. (CVE-2020-35965)

  - Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By     crafting a legitimate ffconcat file that references an image, followed by a file the triggers the tty     demuxer, the contents of the second file will be copied into the output file verbatim (as long as the     `-vcodec copy` option is passed to ffmpeg). (CVE-2021-3566)

  - Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38092)

  - Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38093)

  - Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38094)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0005-1 advisory.

  - Buffer Overflow vulnerability in function config_input in libavfilter/vf_gblur.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts. (CVE-2020-20891)

  - An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero.
    (CVE-2020-20892)

  - An issue was discovered in function latm_write_packet in libavformat/latmenc.c in Ffmpeg 4.2.1, allows     attackers to cause a Denial of Service or other unspecified impacts due to a Null pointer dereference.
    (CVE-2020-20896)

  - A CWE-125: Out-of-bounds read vulnerability exists in long_term_filter function in g729postfilter.c in     FFmpeg 4.2.1 during computation of the denominator of pseudo-normalized correlation R'(0), that could     result in disclosure of information. (CVE-2020-20902)

  - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in avcodec_alloc_context3 at     options.c. (CVE-2020-22037)

  - A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in     the link_filter_inouts function in libavfilter/graphparser.c. (CVE-2020-22042)

  - decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in     calculations of when to perform memset zero operations. (CVE-2020-35965)

  - Prior to ffmpeg version 4.3, the tty demuxer did not have a 'read_probe' function assigned to it. By     crafting a legitimate ffconcat file that references an image, followed by a file the triggers the tty     demuxer, the contents of the second file will be copied into the output file verbatim (as long as the     `-vcodec copy` option is passed to ffmpeg). (CVE-2021-3566)

  - Integer Overflow vulnerability in function filter_prewitt in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38092)

  - Integer Overflow vulnerability in function filter_robert in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38093)

  - Integer Overflow vulnerability in function filter_sobel in libavfilter/vf_convolution.c in Ffmpeg 4.2.1,     allows attackers to cause a Denial of Service or other unspecified impacts. (CVE-2021-38094)

  - An issue was discovered in the FFmpeg package, where vp3_decode_frame in libavcodec/vp3.c lacks check of     the return value of av_malloc() and will cause a null pointer dereference, impacting availability.
    (CVE-2022-3109)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
257710	Linux Distros Unpatched Vulnerability : CVE-2020-20891	Nessus	Misc.	8/27/2025	8/27/2025	high
154611	openSUSE 15 Security Update : ffmpeg (openSUSE-SU-2021:3521-1)	Nessus	SuSE Local Security Checks	10/28/2021	9/23/2025	high
154620	SUSE SLED15 / SLES15 Security Update : ffmpeg (SUSE-SU-2021:3521-1)	Nessus	SuSE Local Security Checks	10/28/2021	7/13/2023	high
169467	SUSE SLES15 Security Update : ffmpeg (SUSE-SU-2023:0005-1)	Nessus	SuSE Local Security Checks	1/3/2023	7/14/2023	high

Detections

Analytics

Plugins Search

high

high

high

high