CVE-2020-22020: Buffer Overflow
Published May 26, 2021
·Updated
Buffer Overflow vulnerability in FFmpeg 4.2 in the builddiffmap function in libavfilter/vffieldmatch.c, which could let a remote malicious user cause a Denial of Service.
Affected Software
4 affected componentsFixes available
debian/ffmpeg
7:4.3.7-0+deb11u17:4.3.8-0+deb11u17:5.1.6-0+deb12u17:7.0.2-37:7.1-3
FFmpeg FFmpeg=4.2
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Remediation
Event History
May 26, 2021
CVE Published
via MITRE·07:08 PM
Data Sourced
via MITRE·07:08 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:45 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:24 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-22020?
CVE-2020-22020 is a buffer overflow vulnerability in FFmpeg 4.2.
2
How can a remote malicious user exploit CVE-2020-22020?
A remote malicious user can exploit CVE-2020-22020 to cause a Denial of Service.
3
Which versions of FFmpeg are affected by CVE-2020-22020?
FFmpeg versions 3.4.11 to 4.2.7 are affected by CVE-2020-22020.
4
How can I fix CVE-2020-22020 in Ubuntu?
To fix CVE-2020-22020 in Ubuntu, update FFmpeg to version 3.4.11-0ubuntu0.1 (for Bionic) or 4.2.7-0ubuntu0.1 (for Focal), depending on your distribution.
5
How can I fix CVE-2020-22020 in Debian?
To fix CVE-2020-22020 in Debian, update FFmpeg to version 7:4.1.9-0+deb10u1, 7:4.1.11-0+deb10u1, 7:4.3.6-0+deb11u1, 7:5.1.3-1, or 7:6.0-7, depending on your distribution.