Home

CVE-2020-13904

Description

FFmpeg 2.8 and 4.2.3 has a use-after-free via a crafted EXTINF duration in an m3u8 file because parse_playlist in libavformat/hls.c frees a pointer, and later that pointer is accessed in av_probe_input_format3 in libavformat/format.c.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.475

Associated Vulnerability

VulnerabilityOS Platform
ffmpeg security update(DSA-4722-1) ffmpeg_4.1.6-1~deb10u1_i386.debLinux
ffmpeg security update(DSA-4722-1) ffmpeg_4.1.6-1~deb10u1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_2.8.17-0ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) ffmpeg_2.8.17-0ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil55_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil55_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil56_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavutil56_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale4_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale4_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale5_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswscale5_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec57_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec57_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec58_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec58_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter6_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter6_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter7_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter7_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice57_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice57_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice58_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavdevice58_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat57_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat57_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat58_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavformat58_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc54_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc54_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc55_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libpostproc55_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample3_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample3_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample4_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavresample4_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample2_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample2_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample3_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libswresample3_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra57_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra57_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra58_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavcodec-extra58_4.2.4-1ubuntu0.1_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra6_3.4.8-0ubuntu0.2_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra6_3.4.8-0ubuntu0.2_amd64.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra7_4.2.4-1ubuntu0.1_i386.debLinux
Tools for transcoding, streaming and playing of multimedia files (USN-4431-1) libavfilter-extra7_4.2.4-1ubuntu0.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234