NULL pointer dereference in FFmpeg - CVE-2022-3341

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU71645

NULL pointer dereference in FFmpeg - CVE-2022-3341

Published: January 30, 2023


Vulnerability identifier: #VU71645
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3341
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the decode_main_header() function in libavformat/nutdec.c A remote attacker can trick the victim to open a specially crafted file and perform a denial of service (DoS) attack.


Affected software

FFmpeg
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Slackware Linux
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Server
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Desktop Applications
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Workstation Extension
openSUSE Leap
Ubuntu
openEuler
Telemetry Dashboard
Liquidware
Citrix Workspace App
Webex App VDI
Cisco Jabber
SUSE Linux Enterprise Module for Packagehub Subpackages
libavcodec57 (Ubuntu package)
libavdevice-ffmpeg56 (Ubuntu package)
libav-tools (Ubuntu package)
libavutil-ffmpeg54 (Ubuntu package)
libavcodec-ffmpeg-extra56 (Ubuntu package)
libavformat-ffmpeg56 (Ubuntu package)
libavcodec-ffmpeg56 (Ubuntu package)
libpostproc-ffmpeg53 (Ubuntu package)
libavfilter-ffmpeg5 (Ubuntu package)
libswscale-ffmpeg3 (Ubuntu package)
libavresample-ffmpeg2 (Ubuntu package)
libswresample-ffmpeg1 (Ubuntu package)
ffmpeg (Ubuntu package)
libavcodec-extra57 (Ubuntu package)
libavfilter6 (Ubuntu package)
libavfilter-extra6 (Ubuntu package)
libavformat57 (Ubuntu package)
libavdevice57 (Ubuntu package)
libpostproc54 (Ubuntu package)
libswscale4 (Ubuntu package)
libswresample2 (Ubuntu package)
libavresample3 (Ubuntu package)
libavutil55 (Ubuntu package)
libavresample4 (Ubuntu package)
libavformat58 (Ubuntu package)
libpostproc55 (Ubuntu package)
libswresample3 (Ubuntu package)
libswscale5 (Ubuntu package)
libavdevice58 (Ubuntu package)
libavformat-extra58 (Ubuntu package)
libavcodec-extra58 (Ubuntu package)
libavfilter-extra (Ubuntu package)
libavfilter-extra7 (Ubuntu package)
libavcodec58 (Ubuntu package)
libavfilter7 (Ubuntu package)
libavformat-extra (Ubuntu package)
libavutil56 (Ubuntu package)
libavcodec-extra (Ubuntu package)
libavcodec-devel
libpostproc54
libavcodec57-debuginfo
libavdevice-devel
libswresample2
libswresample2-debuginfo
libavformat57-debuginfo
libswresample-devel
libavfilter6-debuginfo
ffmpeg-debugsource
libswscale4
libavutil-devel
libavformat57
libavfilter6
libpostproc-devel
ffmpeg-debuginfo
libavformat-devel
libavresample3
libpostproc54-debuginfo
libswscale4-debuginfo
libavresample-devel
libavcodec57
libavdevice57
libavutil55-debuginfo
libavdevice57-debuginfo
libswresample2-32bit-debuginfo
libavcodec57-32bit-debuginfo
libavdevice57-32bit
libavformat57-32bit
libavformat57-32bit-debuginfo
libswscale4-32bit-debuginfo
libswscale4-32bit
libavfilter6-32bit-debuginfo
libpostproc54-32bit
libavresample3-32bit
libavcodec57-32bit
libavresample3-32bit-debuginfo
libavresample3-debuginfo
libswscale-devel
libavutil55
libavfilter-devel
libavutil55-32bit-debuginfo
libavfilter6-32bit
libavdevice57-32bit-debuginfo
libavutil55-32bit
libpostproc54-32bit-debuginfo
libswresample2-32bit
ffmpeg-private-devel
ffmpeg
libavdevice
ffmpeg-libs
ffmpeg-devel
libavdevice58_13
libavcodec58_134-32bit
libswscale5_9-debuginfo
libswscale5_9
libswresample3_9
libpostproc55_9-debuginfo
libpostproc55_9
libavutil56_70-debuginfo
libavutil56_70
libavresample4_0-debuginfo
libavresample4_0
libavformat58_76-debuginfo
libavformat58_76
libavfilter7_110-debuginfo
libavfilter7_110
libavdevice58_13-debuginfo
libswresample3_9-debuginfo
libavcodec58_134-debuginfo
libavcodec58_134
ffmpeg-4-private-devel
ffmpeg-4-libswscale-devel
ffmpeg-4-libswresample-devel
ffmpeg-4-libpostproc-devel
ffmpeg-4-libavutil-devel
ffmpeg-4-libavresample-devel
ffmpeg-4-libavformat-devel
ffmpeg-4-libavfilter-devel
ffmpeg-4-libavdevice-devel
ffmpeg-4-libavcodec-devel
ffmpeg-4-debugsource
ffmpeg-4-debuginfo
ffmpeg-4
libavdevice58_13-32bit
libswscale5_9-32bit-debuginfo
libswscale5_9-32bit
libswresample3_9-32bit-debuginfo
libswresample3_9-32bit
libpostproc55_9-32bit-debuginfo
libpostproc55_9-32bit
libavutil56_70-32bit-debuginfo
libavutil56_70-32bit
libavresample4_0-32bit-debuginfo
libavresample4_0-32bit
libavformat58_76-32bit-debuginfo
libavformat58_76-32bit
libavfilter7_110-32bit-debuginfo
libavfilter7_110-32bit
libavdevice58_13-32bit-debuginfo
libavcodec58_134-32bit-debuginfo
libavutil57 (Ubuntu package)
libavcodec-extra59 (Ubuntu package)
libavfilter8 (Ubuntu package)
libpostproc56 (Ubuntu package)
libavformat-extra59 (Ubuntu package)
libavdevice59 (Ubuntu package)
libavformat59 (Ubuntu package)
libswscale6 (Ubuntu package)
libswresample4 (Ubuntu package)
libavcodec59 (Ubuntu package)
libavfilter-extra8 (Ubuntu package)
Cisco Webex Meetings
VMware Horizon Client

How to mitigate CVE-2022-3341

Install update from vendor's website.

FFmpeg - update to 5.1
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
libavcodec57 (Ubuntu package) - update to Ubuntu Pro
libavdevice-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libav-tools (Ubuntu package) - update to Ubuntu Pro
libavutil-ffmpeg54 (Ubuntu package) - update to Ubuntu Pro
libavcodec-ffmpeg-extra56 (Ubuntu package) - update to Ubuntu Pro
libavformat-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavcodec-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libpostproc-ffmpeg53 (Ubuntu package) - update to Ubuntu Pro
libavfilter-ffmpeg5 (Ubuntu package) - update to Ubuntu Pro
libswscale-ffmpeg3 (Ubuntu package) - update to Ubuntu Pro
libavresample-ffmpeg2 (Ubuntu package) - update to Ubuntu Pro
libswresample-ffmpeg1 (Ubuntu package) - update to Ubuntu Pro
ffmpeg (Ubuntu package) - addressed in versions Ubuntu Pro, 7:5.1.1-1ubuntu2.1
libavcodec-extra57 (Ubuntu package) - update to Ubuntu Pro
libavfilter6 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra6 (Ubuntu package) - update to Ubuntu Pro
libavformat57 (Ubuntu package) - update to Ubuntu Pro
libavdevice57 (Ubuntu package) - update to Ubuntu Pro
libpostproc54 (Ubuntu package) - update to Ubuntu Pro
libswscale4 (Ubuntu package) - update to Ubuntu Pro
libswresample2 (Ubuntu package) - update to Ubuntu Pro
libavresample3 (Ubuntu package) - update to Ubuntu Pro
libavutil55 (Ubuntu package) - update to Ubuntu Pro
libavresample4 (Ubuntu package) - update to Ubuntu Pro
libavformat58 (Ubuntu package) - update to Ubuntu Pro
libpostproc55 (Ubuntu package) - update to Ubuntu Pro
libswresample3 (Ubuntu package) - update to Ubuntu Pro
libswscale5 (Ubuntu package) - update to Ubuntu Pro
libavdevice58 (Ubuntu package) - update to Ubuntu Pro
libavformat-extra58 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra58 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra (Ubuntu package) - addressed in versions Ubuntu Pro, 7:5.1.1-1ubuntu2.1
libavfilter-extra7 (Ubuntu package) - update to Ubuntu Pro
libavcodec58 (Ubuntu package) - update to Ubuntu Pro
libavfilter7 (Ubuntu package) - update to Ubuntu Pro
libavformat-extra (Ubuntu package) - addressed in versions Ubuntu Pro, 7:5.1.1-1ubuntu2.1
libavutil56 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra (Ubuntu package) - addressed in versions Ubuntu Pro, 7:5.1.1-1ubuntu2.1
libavcodec-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libpostproc54 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavcodec57-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavdevice-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswresample2 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswresample2-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavformat57-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswresample-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavfilter6-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
ffmpeg-debugsource - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswscale4 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavutil-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavformat57 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavfilter6 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libpostproc-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
ffmpeg-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavformat-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavresample3 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libpostproc54-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswscale4-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavresample-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavcodec57 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavdevice57 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavutil55-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavdevice57-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswresample2-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavcodec57-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavdevice57-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavformat57-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavformat57-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswscale4-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswscale4-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavfilter6-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libpostproc54-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavresample3-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavcodec57-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavresample3-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavresample3-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswscale-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavutil55 - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavfilter-devel - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavutil55-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavfilter6-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavdevice57-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libavutil55-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libpostproc54-32bit-debuginfo - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
libswresample2-32bit - addressed in versions 3.4.2-150000.4.53.2, 3.4.2-150200.11.25.1
ffmpeg-private-devel - update to 3.4.2-150200.11.25.1
ffmpeg - update to 3.4.2-150200.11.25.1
ffmpeg-debugsource - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
ffmpeg-debuginfo - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
libavdevice - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
ffmpeg-libs - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
ffmpeg - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
ffmpeg-devel - addressed in versions 4.2.4-7, 4.2.4-8, 4.2.4-14
ffmpeg - update to 4.4.5
libavdevice58_13 - update to 4.4-150400.3.11.1
libavcodec58_134-32bit - update to 4.4-150400.3.11.1
libswscale5_9-debuginfo - update to 4.4-150400.3.11.1
libswscale5_9 - update to 4.4-150400.3.11.1
libswresample3_9 - update to 4.4-150400.3.11.1
libpostproc55_9-debuginfo - update to 4.4-150400.3.11.1
libpostproc55_9 - update to 4.4-150400.3.11.1
libavutil56_70-debuginfo - update to 4.4-150400.3.11.1
libavutil56_70 - update to 4.4-150400.3.11.1
libavresample4_0-debuginfo - update to 4.4-150400.3.11.1
libavresample4_0 - update to 4.4-150400.3.11.1
libavformat58_76-debuginfo - update to 4.4-150400.3.11.1
libavformat58_76 - update to 4.4-150400.3.11.1
libavfilter7_110-debuginfo - update to 4.4-150400.3.11.1
libavfilter7_110 - update to 4.4-150400.3.11.1
libavdevice58_13-debuginfo - update to 4.4-150400.3.11.1
libswresample3_9-debuginfo - update to 4.4-150400.3.11.1
libavcodec58_134-debuginfo - update to 4.4-150400.3.11.1
libavcodec58_134 - update to 4.4-150400.3.11.1
ffmpeg-4-private-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libswscale-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libswresample-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libpostproc-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavutil-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavresample-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavformat-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavfilter-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavdevice-devel - update to 4.4-150400.3.11.1
ffmpeg-4-libavcodec-devel - update to 4.4-150400.3.11.1
ffmpeg-4-debugsource - update to 4.4-150400.3.11.1
ffmpeg-4-debuginfo - update to 4.4-150400.3.11.1
ffmpeg-4 - update to 4.4-150400.3.11.1
libavdevice58_13-32bit - update to 4.4-150400.3.11.1
libswscale5_9-32bit-debuginfo - update to 4.4-150400.3.11.1
libswscale5_9-32bit - update to 4.4-150400.3.11.1
libswresample3_9-32bit-debuginfo - update to 4.4-150400.3.11.1
libswresample3_9-32bit - update to 4.4-150400.3.11.1
libpostproc55_9-32bit-debuginfo - update to 4.4-150400.3.11.1
libpostproc55_9-32bit - update to 4.4-150400.3.11.1
libavutil56_70-32bit-debuginfo - update to 4.4-150400.3.11.1
libavutil56_70-32bit - update to 4.4-150400.3.11.1
libavresample4_0-32bit-debuginfo - update to 4.4-150400.3.11.1
libavresample4_0-32bit - update to 4.4-150400.3.11.1
libavformat58_76-32bit-debuginfo - update to 4.4-150400.3.11.1
libavformat58_76-32bit - update to 4.4-150400.3.11.1
libavfilter7_110-32bit-debuginfo - update to 4.4-150400.3.11.1
libavfilter7_110-32bit - update to 4.4-150400.3.11.1
libavdevice58_13-32bit-debuginfo - update to 4.4-150400.3.11.1
libavcodec58_134-32bit-debuginfo - update to 4.4-150400.3.11.1
libavutil57 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavcodec-extra59 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavfilter8 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libpostproc56 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavformat-extra59 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavdevice59 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavformat59 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libswscale6 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libswresample4 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavcodec59 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1
libavfilter-extra8 (Ubuntu package) - update to 7:5.1.1-1ubuntu2.1

External References

Related Security Bulletins