CVE-2020-20445: Divide by Zero
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3
Event History
Frequently Asked Questions
What is CVE-2020-20445?
CVE-2020-20445 is a vulnerability in FFmpeg 4.2 that allows a remote malicious user to cause a Denial of Service through a Divide By Zero issue.
How does CVE-2020-20445 affect FFmpeg?
CVE-2020-20445 affects FFmpeg 4.2 through a Divide By Zero issue in libavcodec/lpc.h.
What is the severity of CVE-2020-20445?
The severity of CVE-2020-20445 is not mentioned in the provided information.
Which versions of FFmpeg are affected by CVE-2020-20445?
FFmpeg 4.2, 4.2.x, 3.4.11, 4.4.2, 4.4.x, 4.2.7, 4.1.9, 4.1.11, 4.3.6, 5.1.3, and 6.0-7 are affected by CVE-2020-20445.
How can I fix CVE-2020-20445?
Apply the latest security updates provided by Ubuntu or Debian for FFmpeg to fix CVE-2020-20445.