CVE-2020-22043: Medium severity FFmpeg FFmpeg vulnerability
Published Jun 1, 2021
·Updated
A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak at the fifoalloccommon function in libavutil/fifo.c.
Affected Software
2 affected componentsFixes available
debian/ffmpeg
7:4.3.7-0+deb11u17:4.3.8-0+deb11u17:5.1.6-0+deb12u17:7.0.2-37:7.1-3
FFmpeg FFmpeg=4.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.7-0+deb11u1Fixed in 7:4.3.8-0+deb11u1Fixed in 7:5.1.6-0+deb12u1Fixed in 7:7.0.2-3Fixed in 7:7.1-3
Event History
Jun 1, 2021
CVE Published
via MITRE·07:57 PM
Data Sourced
via MITRE·07:57 PM
Description
Data Sourced
via OSV·08:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2020-22043?
The severity of CVE-2020-22043 is Denial of Service.
2
How does CVE-2020-22043 impact FFmpeg 4.2?
CVE-2020-22043 can cause a Denial of Service vulnerability in FFmpeg 4.2 due to a memory leak.
3
Which versions of FFmpeg are affected by CVE-2020-22043?
FFmpeg versions 4.2 and below are affected by CVE-2020-22043.
4
What is the remedy for CVE-2020-22043 on Ubuntu?
Upgrade to FFmpeg 4.3 or higher on Ubuntu to fix CVE-2020-22043.
5
What is the remedy for CVE-2020-22043 on Debian?
Upgrade to FFmpeg 4.1.11-0+deb10u1 or higher on Debian to fix CVE-2020-22043.