Home

CVE-2019-9721

Description

A denial of service in the subtitle decoder in FFmpeg 3.2 and 4.1 allows attackers to hog the CPU via a crafted video file in Matroska format, because handle_open_brace in libavcodec/htmlsubtitles.c has a complex format argument to sscanf.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.501

Associated Vulnerability

VulnerabilityOS Platform
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) ffmpeg_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil55_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil55_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil56_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil56_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil56_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavutil56_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale4_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale4_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale5_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale5_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale5_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswscale5_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec57_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec57_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec58_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec58_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec58_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec58_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter6_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter6_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter7_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter7_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter7_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter7_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice57_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice57_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice58_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice58_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice58_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavdevice58_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat57_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat57_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat58_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat58_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat58_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavformat58_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc54_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc54_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc55_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc55_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc55_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libpostproc55_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample3_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample3_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample4_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample4_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample4_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavresample4_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample2_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample2_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample3_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample3_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample3_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libswresample3_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra57_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra57_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra58_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra58_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra58_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavcodec-extra58_4.1.3-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra6_3.4.6-0ubuntu0.18.04.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra6_3.4.6-0ubuntu0.18.04.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra7_4.0.4-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra7_4.0.4-0ubuntu1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra7_4.1.3-0ubuntu1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia (USN-3967-1) libavfilter-extra7_4.1.3-0ubuntu1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234