FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 in load_input_picture in FFmpeg7.0

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6983-1 advisory.

    Zeng Yunxiang discovered that FFmpeg incorrectly handled memory during video encoding. An attacker could     possibly use this issue to perform a denial of service, or execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2864-1 advisory.

    - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug in load_input_picture()     (bsc#1227296).
    - CVE-2023-51798: Fixed buffer overflow via a floating point exception (FPE) error at     libavfilter/vf_minterpolate.c (bsc#1223304).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2803-1 advisory.

    - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug in load_input_picture()     (bsc#1227296).
    - CVE-2023-51798: Fixed floating point exception in the via the interpolate function in     libavfilter/vf_minterpolate.c (bsc#1223304).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2814-1 advisory.

    - CVE-2024-32230: Fixed buffer overflow due to negative-size-param bug at libavcodec/mpegvideo_enc.c in     load_input_picture (bsc#1227296)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
206422	Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : FFmpeg vulnerability (USN-6983-1)	Nessus	Ubuntu Local Security Checks	high
205341	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ffmpeg-4 (SUSE-SU-2024:2864-1)	Nessus	SuSE Local Security Checks	high
205168	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ffmpeg-4 (SUSE-SU-2024:2803-1)	Nessus	SuSE Local Security Checks	high
205166	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : ffmpeg (SUSE-SU-2024:2814-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-32230

high

Tenable Plugins

high

high

high

high