Out-of-bounds read in FFmpeg - CVE-2018-13300
Published: July 26, 2018
Vulnerability identifier: #VU14018
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-13300
CWE-ID: CWE-125
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists due to improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c. A remote attacker can supply specially crafted AVI file to MPEG4, trick the victim into converting it, trigger out-of-bounds read and cause the service to crash or possibly access arbitrary data
Affected software
FFmpeg
SUSE Package Hub for SUSE Linux Enterprise
Debian Linux
SUSE Linux
Opensuse
ffmpeg (Alpine package)
SUSE Package Hub for SUSE Linux Enterprise
Debian Linux
SUSE Linux
Opensuse
ffmpeg (Alpine package)
How to mitigate CVE-2018-13300
Update to version 4.0.2.
FFmpeg - update to 4.0.2
ffmpeg (Alpine package) - update to 3.4.4-r0
ffmpeg (Alpine package) - update to 3.4.4-r0