CVE-2022-38865: Divide by Zero
Certain The MPlayer Project products are vulnerable to Divide By Zero via the function demuxavireadpacket of libmpdemux/demuxavi.c. This affects mplyer SVN-r38374-13.0.1 and mencoder SVN-r38374-13.0.1.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/mplayerto a version that resolves this vulnerability.Fixed in 2:1.5+svn38408-1Fixed in 2:1.5+svn38674-2Fixed in 2:1.5+svn38681-2 - Upgrade
Upgrade
debian/mplayerto a version that resolves this vulnerability.Fixed in 2:1.5+svn38408-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-38865?
CVE-2022-38865 has a moderate severity rating due to potential application crashes resulting from divide by zero errors.
How do I fix CVE-2022-38865?
To fix CVE-2022-38865, update to the latest version of MPlayer or MEncoder that addresses this vulnerability.
What are the affected versions for CVE-2022-38865?
CVE-2022-38865 affects MPlayer and MEncoder version SVN-r38374-13.0.1.
Which platforms are impacted by CVE-2022-38865?
CVE-2022-38865 impacts users on Debian GNU/Linux version 10.0 as well as the specific versions of MPlayer and MEncoder.
Is CVE-2022-38865 present in the official MPlayer Project software?
Yes, CVE-2022-38865 is present in the official releases of MPlayer and MEncoder from the MPlayer Project.