Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2021:3521-1 Moderate: ffmpeg Denial Of Service And Buffer Overflow

suse
Calendar Grey October 26, 2021
Scroller Suse
SUSE Security Advisory: ffmpeg fix resolves several vulnerabilities rated as moderate severity affecting enterprise installations.
An update that fixes 12 vulnerabilities is now available

Summary

This update for ffmpeg fixes the following issues: - CVE-2021-3566: Fixed information leak (bsc#1189166). - CVE-2021-38093: Fixed integer overflow vulnerability in filter_robert() (bsc#1190734) - CVE-2021-38092: Fixed integer overflow vulnerability in filter_prewitt() (bsc#1190733) - CVE-2021-38094: Fixed integer overflow vulnerability in filter_sobel() (bsc#1190735) - CVE-2020-22037: Fixed denial of service vulnerability caused by memory leak in avcodec_alloc_context3() (bsc#1186756) - CVE-2020-35965: Fixed out-of-bounds write in decode_frame() (bsc#1187852) - CVE-2020-20892: Fixed an issue with filter_frame() (bsc#1190719) - CVE-2020-20891: Fixed a buffer overflow vulnerability in config_input() (bsc#1190718) - CVE-2020-20895: Fixed a buffer overflow vulnerability in function

Topics%20covered

Topics Covered

security advisory update buffer overflow patch suse deny service ffmpeg

References

#1186756 #1187852 #1189166 #1190718 #1190719

#1190722 #1190723 #1190726 #1190729 #1190733

#1190734 #1190735

Cross- CVE-2020-20891 CVE-2020-20892 CVE-2020-20895

CVE-2020-20896 CVE-2020-20899 CVE-2020-20902

CVE-2020-22037 CVE-2020-35965 CVE-2021-3566

CVE-2021-38092 CVE-2021-38093 CVE-2021-38094

CVSS scores:

CVE-2020-20891 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2020-20892 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2020-20895 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2020-20896 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2020-20899 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CVE-2020-20902 (SUSE): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2021:3521-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory update buffer overflow patch suse deny service ffmpeg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.