CVE-2020-20453: Divide by Zero
Published May 25, 2021
·Updated
FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
Affected Software
5 affected componentsFixes available
debian/ffmpeg
7:4.3.7-0+deb11u17:4.3.8-0+deb11u17:5.1.6-0+deb12u17:7.0.2-37:7.1-3
FFmpeg FFmpeg=4.2
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Debian Debian Linux=11.0
Remediation
Patch Available
Event History
May 25, 2021
CVE Published
via MITRE·07:15 PM
Data Sourced
via MITRE·07:15 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:44 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:24 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-20453?
CVE-2020-20453 is a Divide By Zero vulnerability in FFmpeg 4.2 via libavcodec/aaccoder.
2
How does CVE-2020-20453 impact FFmpeg?
CVE-2020-20453 allows a remote malicious user to cause a Denial of Service (DoS) in FFmpeg 4.2.
3
Which versions of FFmpeg are affected by CVE-2020-20453?
FFmpeg versions 7:4.4.2-0ubuntu0.21.10.1, 7:3.4.11-0ubuntu0.1, 7:4.2.7-0ubuntu0.1, 4.4.1, 7:2.8.17-0ubuntu0.1+, 7:4.1.9-0+deb10u1, 7:4.1.11-0+deb10u1, 7:4.3.6-0+deb11u1, 7:5.1.3-1, and 7:6.0-7 are affected by CVE-2020-20453.
4
What is the severity of CVE-2020-20453?
The severity of CVE-2020-20453 is not specified.
5
How can I fix CVE-2020-20453 in FFmpeg?
To fix CVE-2020-20453 in FFmpeg, update to the recommended version specified in the corresponding security notice from your operating system's vendor.