Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-13304 →
DEBIAN-CVE-2018-13304
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.0.2-1"}]}]
Debian:13
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.0.2-1"}]}]
Debian:14
ffmpeg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7:4.0.2-1"}]}]
Références
- advisory security-tracker.debian.org