CVE-2020-22042: Medium severity FFmpeg FFmpeg vulnerability
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak is affected by: memory leak in the linkfilterinouts function in libavfilter/graphparser.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.3.3-r0 - Upgrade
Upgrade
alpine/ffmpegto a version that resolves this vulnerability.Fixed in 4.4-r0 - Upgrade
Upgrade
alpine/ffmpeg4to a version that resolves this vulnerability.Fixed in 4.4-r0
Event History
Frequently Asked Questions
What is CVE-2020-22042?
CVE-2020-22042 is a Denial of Service (DoS) vulnerability that exists in FFmpeg 4.2 due to a memory leak in the link_filter_inouts function in libavfilter/graphparser.c.
How does CVE-2020-22042 affect FFmpeg?
CVE-2020-22042 affects FFmpeg version 4.2 and earlier.
What is the severity of CVE-2020-22042?
The severity of CVE-2020-22042 is moderate.
How can I fix CVE-2020-22042?
To fix CVE-2020-22042, update FFmpeg to version 4.2.7 or later.
Where can I find more information about CVE-2020-22042?
You can find more information about CVE-2020-22042 on the CVE website (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22042) and the FFmpeg trac ticket (https://trac.ffmpeg.org/ticket/8267).