USN-6449-1: FFmpeg vulnerabilities
It was discovered that FFmpeg incorrectly managed memory resulting in a memory leak. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22038) It was discovered that FFmpeg incorrectly handled certain input files, leading to an integer overflow. An attacker could possibly use this issue to cause a denial of service via application crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-20898, CVE-2021-38090, CVE-2021-38091, CVE-2021-38092, CVE-2021-38093, CVE-2021-38094) It was discovered that FFmpeg incorrectly managed memory, resulting in a memory leak. If a user or automated system were tricked into processing a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. (CVE-2022-48434)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6449-1?
The severity of USN-6449-1 is categorized as high due to the potential for denial of service via application crash.
How do I fix USN-6449-1?
To fix USN-6449-1, upgrade affected packages to versions 7:4.4.2-0ubuntu0.22.04.1+esm2 for Ubuntu 22.04 or 7:4.2.7-0ubuntu0.1+esm3 for 20.04.
Which versions of Ubuntu are affected by USN-6449-1?
USN-6449-1 affects Ubuntu versions 18.04 LTS and 20.04 LTS.
What software is impacted by USN-6449-1?
USN-6449-1 impacts the FFmpeg package and various related libraries such as libavcodec, libavformat, and libavfilter.
Is there a workaround for USN-6449-1?
While there is no official workaround for USN-6449-1, the only safe action is to apply the recommended package updates.