CVE-2024-31585: Medium severity FFmpeg FFmpeg vulnerability
FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avfshowspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ffmpegto a version that resolves this vulnerability.Fixed in 7:6.0-6ubuntu1.1 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.5-0+deb12u1 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:7.0.1-3 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:5.1.9-0+deb12u1Fixed in 7:7.1.5-0+deb13u1Fixed in 7:9.0.2-4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31585?
CVE-2024-31585 is categorized as a Denial of Service (DoS) vulnerability.
How do I fix CVE-2024-31585?
To address CVE-2024-31585, update FFmpeg to versions 7:6.0-6ubuntu1.1 or greater on Ubuntu, or to 7:4.3.6-0+deb11u1, 7:4.3.7-0+deb11u1, or 7:5.1.5-0+deb12u1 on Debian.
Which FFmpeg versions are affected by CVE-2024-31585?
CVE-2024-31585 affects FFmpeg versions from n5.1 to n6.1.
What type of vulnerability is CVE-2024-31585?
CVE-2024-31585 is identified as an Off-by-one Error vulnerability.
What can attackers do with CVE-2024-31585?
Attackers can exploit CVE-2024-31585 to induce a Denial of Service (DoS) condition through crafted input.