CVE-2018-6392

Published: 29 January 2018

The filter_slice function in libavfilter/vf_transpose.c in FFmpeg through 3.4.1 allows remote attackers to cause a denial of service (out-of-array access) via a crafted MP4 file.

Priority

CVSS 3 base score: 6.5

Status

Package	Release	Status
ffmpeg Launchpad, Ubuntu, Debian	Upstream	Released (7:3.4.2-1)




	Ubuntu 18.04 LTS (Bionic Beaver)	Not vulnerable (7:3.4.2-2)
	Ubuntu 16.04 ESM (Xenial Xerus)	Released (7:2.8.14-0ubuntu0.16.04.1)
	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6392
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/3f621455d62e46745453568d915badd5b1e5bcd5
https://git.ffmpeg.org/gitweb/ffmpeg.git/commit/c6939f65a116b1ffed345d29d8621ee4ffb32235
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

CVE-2018-6392

Medium

Status

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading