A Denial of Service vulnerability exists in FFmpeg 4.2 idue to a memory leak in the v_frame_alloc function in frame.c.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5167-1 advisory.

    It was discovered that FFmpeg did not properly verify certain input when processing video and audio files.
    An attacker could possibly use this to send specially crafted input to the application, force a division     by zero, and cause a denial of service (application crash). (CVE-2020-20445, CVE-2020-20446,     CVE-2020-20453, CVE-2020-20892)

    It was discovered that FFmpeg did not properly perform certain bit shift and memory operations. An     attacker could possibly use this issue to expose sensitive information. (CVE-2020-20902)

    It was discovered that FFmpeg did not properly perform memory management operations in various of its     functions. An attacker could possibly use this issue to send specially crafted input to the application     and cause a denial of service (application crash) or execute arbitrary code. (CVE-2020-21041,     CVE-2020-20451, CVE-2020-21688, CVE-2020-21697, CVE-2020-22020, CVE-2020-22021, CVE-2020-22022,     CVE-2020-22025, CVE-2020-22031, CVE-2020-22032, CVE-2020-22037, CVE-2020-22040, CVE-2020-22041,     CVE-2020-22042, CVE-2020-22044)

    It was discovered that FFmpeg did not properly perform memory management operations in various of its     functions. An attacker could possibly use this issue to send specially crafted input to the application     and cause a denial of service (application crash) or execute arbitrary code. (CVE-2020-22016,     CVE-2020-22046, CVE-2020-22049, CVE-2020-22054)

    It was discovered that FFmpeg did not properly perform memory management operations in various of its     functions. An attacker could possibly use this issue to send specially crafted input to the application     and cause a denial of service (application crash) or execute arbitrary code. (CVE-2020-35965)

    It was discovered that FFmpeg did not properly handle data assigned to the tty demuxer. An attacker could     possibly use this issue to send specially crafted input to the application and expose sensitive     information. (CVE-2021-3566)

    It was discovered that FFmpeg did not perform checks on function return values when encoding and     formatting input video and audio files. An attacker could possibly use this issue to cause a denial of     service (application crash) or execute arbitrary code. (CVE-2021-38114, CVE-2021-38171)

    It was discovered that FFmpeg did not properly sanitize function returned data when calculating frame     duration values. An attacker could possibly use this issue to cause an assertion failure and then cause a     denial of service (application crash). (CVE-2021-38291)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6430-1 advisory.

    It was discovered that FFmpeg did not properly handle certain inputs in vf_lagfun.c, resulting in a buffer     overflow vulnerability. An attacker could possibly use this issue to cause a denial of service via     application crash. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22024)

    It was discovered that FFmpeg incorrectly managed memory in avienc.c, resulting in a memory leak. An     attacker could possibly use this issue to cause a denial of service via application crash.
    (CVE-2020-22039)

    It was discovered that FFmpeg incorrectly handled certain files due to a memory leak in frame.c. An     attacker could possibly use this issue to cause a denial of service via application crash. This issue     affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-22040)

    It was discovered that FFmpeg incorrectly handled certain files due to a memory leak in fifo.c. An     attacker could possibly use this issue to cause a denial of service via application crash.
    (CVE-2020-22043)

    It was discovered that FFmpeg incorrectly handled certain files due to a memory leak in vf_tile.c. If a     user or automated system were tricked into processing a specially crafted MOV file, an attacker could     possibly use this issue to cause a denial of service. (CVE-2020-22051)

    It was discovered that FFmpeg incorrectly handled certain MOV files in timecode.c, leading to an integer     overflow. An attacker could possibly use this issue to cause a denial of service using a crafted MOV file.
    This issue only affected Ubuntu 16.04 LTS. (CVE-2021-28429)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183614	Ubuntu 16.04 ESM : FFmpeg vulnerabilities (USN-5167-1)	Nessus	Ubuntu Local Security Checks	critical
182982	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 ESM : FFmpeg vulnerabilities (USN-6430-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2020-22040

medium

Tenable Plugins

critical

medium