CVE-2018-6392

Published: 29 January 2018

The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
ffmpeg Launchpad, Ubuntu, Debian	artful	Ignored (reached end-of-life)
	bionic	Not vulnerable (7:3.4.2-2)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (7:3.4.2-1)
	xenial	Released (7:2.8.14-0ubuntu0.16.04.1)

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/3f621455d62e46745453568d915badd5b1e5bcd5
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c6939f65a116b1ffed345d29d8621ee4ffb32235
NVD
Launchpad
Debian

Bugs

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›