Ubuntu 24.04 LTS: USN-6983-1 Critical: FFmpeg Denial Of Service
Sep 02, 2024
•
LinuxSecurity Advisories
3 - 6 min read
Topics Covered
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file.
========================================================================== Ubuntu Security Notice USN-6983-1 September 02, 2024 ffmpeg vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - ffmpeg: Tools for transcoding, streaming and playing of multimedia files Details: Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during video encoding. An attacker could possibly use this issue to perform a denial of service, or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec-dev 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec-extra60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavdevice60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavfilter-extra9 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavfilter9 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavformat-extra60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavformat60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavutil58 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libpostproc57 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libswresample4 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libswscale7 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec-dev 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro Ubuntu 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-dev 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavdevice58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter7 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavformat58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavresample4 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavutil56 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libpostproc55 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libswresample3 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libswscale5 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro Ubuntu 18.04 LTS ffmpeg 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-dev 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavdevice57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter6 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavformat57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavresample3 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavutil55 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libpostproc54 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libswresample2 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libswscale4 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro Ubuntu 16.04 LTS ffmpeg 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libav-tools 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-dev 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-ffmpeg-extra56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavdevice-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavfilter-ffmpeg5 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavformat-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavresample-ffmpeg2 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavutil-ffmpeg54 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libpostproc-ffmpeg53 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libswresample-ffmpeg1 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libswscale-ffmpeg3 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6983-1 CVE-2024-32230
PREVIOUS
NEXT
Ubuntu 24.04 LTS: USN-6983-1 Critical: FFmpeg Denial Of Service
ubuntu
September 2, 2024
FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: FFmpeg could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - ffmpeg: Tools for transcoding, streaming and playing of multimedia files Details: Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during video encoding. An attacker could possibly use this issue to perform a denial of service, or execute arbitrary code.
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS ffmpeg 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec-dev 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec-extra60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavcodec60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavdevice60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavfilter-extra9 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavfilter9 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavformat-extra60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavformat60 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libavutil58 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libpostproc57 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libswresample4 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro libswscale7 7:6.1.1-3ubuntu5+esm2 Available with Ubuntu Pro Ubuntu 22.04 LTS ffmpeg 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec-dev 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec-extra58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavcodec58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavdevice58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavfilter-extra7 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavfilter7 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavformat-extra58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavformat58 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libavutil56 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libpostproc55 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libswresample3 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro libswscale5 7:4.4.2-0ubuntu0.22.04.1+esm5 Available with Ubuntu Pro Ubuntu 20.04 LTS ffmpeg 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-dev 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-extra58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavdevice58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter-extra7 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter7 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavformat58 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavresample4 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libavutil56 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libpostproc55 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libswresample3 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro libswscale5 7:4.2.7-0ubuntu0.1+esm6 Available with Ubuntu Pro Ubuntu 18.04 LTS ffmpeg 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-dev 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec-extra57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavcodec57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavdevice57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter-extra6 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavfilter6 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavformat57 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavresample3 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libavutil55 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libpostproc54 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libswresample2 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro libswscale4 7:3.4.11-0ubuntu0.1+esm6 Available with Ubuntu Pro Ubuntu 16.04 LTS ffmpeg 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libav-tools 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-dev 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-ffmpeg-extra56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavcodec-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavdevice-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavfilter-ffmpeg5 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavformat-ffmpeg56 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavresample-ffmpeg2 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libavutil-ffmpeg54 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libpostproc-ffmpeg53 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libswresample-ffmpeg1 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro libswscale-ffmpeg3 7:2.8.17-0ubuntu0.1+esm8 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
References
https://ubuntu.com/security/notices/USN-6983-1
CVE-2024-32230
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-6983-1
Topics Covered
Package Information
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!