USN-7188-1: FFmpeg vulnerability

Q: What is the severity of USN-7188-1?

The severity of USN-7188-1 is classified as medium due to the potential for denial of service.

Q: How do I fix USN-7188-1?

To fix USN-7188-1, upgrade FFmpeg and related packages to version 7:4.4.2-0ubuntu0.22.04.1+esm6 or later.

Q: What causes the USN-7188-1 vulnerability?

The USN-7188-1 vulnerability is caused by FFmpeg incorrectly handling certain input, leading to an integer overflow.

Q: Which packages are affected by USN-7188-1?

The affected packages include ffmpeg, libavcodec-extra58, libavcodec58, libavdevice58, and several others listed in the advisory.

Q: What versions of Ubuntu are impacted by USN-7188-1?

The USN-7188-1 vulnerability impacts Ubuntu 22.04 and earlier versions that utilize the affected packages.

Published Jan 8, 2025

Updated

It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service by crashing the application.

Affected Software

96 affected componentsFixes available

All of the following

ubuntu/ffmpeg<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavcodec-extra58<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavcodec58<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavdevice58<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavfilter-extra7<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavfilter7<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavformat-extra58<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavformat58<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libavutil56<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libpostproc55<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libswresample3<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/libswscale5<7:4.4.2-0ubuntu0.22.04.1+esm6

7:4.4.2-0ubuntu0.22.04.1+esm6

Ubuntu Ubuntu=22.04

All of the following

ubuntu/ffmpeg<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavcodec-extra58<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavcodec58<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavdevice58<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavfilter-extra7<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavfilter7<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavformat58<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavresample4<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libavutil56<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libpostproc55<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libswresample3<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/libswscale5<7:4.2.7-0ubuntu0.1+esm7

7:4.2.7-0ubuntu0.1+esm7

Ubuntu Ubuntu=20.04

All of the following

ubuntu/ffmpeg<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavcodec-extra57<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavcodec57<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavdevice57<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavfilter-extra6<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavfilter6<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavformat57<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavresample3<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libavutil55<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libpostproc54<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libswresample2<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/libswscale4<7:3.4.11-0ubuntu0.1+esm7

7:3.4.11-0ubuntu0.1+esm7

Ubuntu Ubuntu=18.04

All of the following

ubuntu/ffmpeg<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libav-tools<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavcodec-ffmpeg-extra56<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavcodec-ffmpeg56<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavdevice-ffmpeg56<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavfilter-ffmpeg5<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavformat-ffmpeg56<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavresample-ffmpeg2<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libavutil-ffmpeg54<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libpostproc-ffmpeg53<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libswresample-ffmpeg1<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

All of the following

ubuntu/libswscale-ffmpeg3<7:2.8.17-0ubuntu0.1+esm9

7:2.8.17-0ubuntu0.1+esm9

Ubuntu Ubuntu=16.04

Event History

Jan 8, 2025

Advisory Published

via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2024-36617

Frequently Asked Questions

What is the severity of USN-7188-1?

The severity of USN-7188-1 is classified as medium due to the potential for denial of service.

How do I fix USN-7188-1?

To fix USN-7188-1, upgrade FFmpeg and related packages to version 7:4.4.2-0ubuntu0.22.04.1+esm6 or later.

What causes the USN-7188-1 vulnerability?

The USN-7188-1 vulnerability is caused by FFmpeg incorrectly handling certain input, leading to an integer overflow.

Which packages are affected by USN-7188-1?

The affected packages include ffmpeg, libavcodec-extra58, libavcodec58, libavdevice58, and several others listed in the advisory.

What versions of Ubuntu are impacted by USN-7188-1?

The USN-7188-1 vulnerability impacts Ubuntu 22.04 and earlier versions that utilize the affected packages.

USN-7188-1: FFmpeg vulnerability

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What is the severity of USN-7188-1?

How do I fix USN-7188-1?

What causes the USN-7188-1 vulnerability?

Which packages are affected by USN-7188-1?

What versions of Ubuntu are impacted by USN-7188-1?

Company

Resources

Contact