Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 792351 (CVE-2020-20445, CVE-2020-20453)

Summary: media-video/ffmpeg: multiple vulnerabilities (CVE-2020-{20445,20453})
Product: Gentoo Security Reporter: John Helmert III <ajak>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED INVALID    
Severity: normal CC: media-video
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: A3 [upstream]
Package list:
Runtime testing required: ---

Description John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2021-05-27 01:17:43 UTC
CVE-2020-20445 (https://trac.ffmpeg.org/ticket/7996):

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/lpc.h, which allows a remote malicious user to cause a Denial of Service.

CVE-2020-20453 (https://trac.ffmpeg.org/ticket/8003):

FFmpeg 4.2 is affected by a Divide By Zero issue via libavcodec/aaccoder, which allows a remote malicious user to cause a Denial of Service
Comment 1 John Helmert III archtester Gentoo Infrastructure gentoo-dev Security 2021-05-27 01:48:40 UTC
Actually, these bugs look like crap. I can't reproduce and they don't seem to be real security issues anyway.