Memory leak in FFmpeg - CVE-2020-22043

Vulnerability identifier: #VU83854

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-22043

CWE-ID: CWE-401

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due memory leak within the fifo_alloc_common function in libavutil/fifo.c. A remote attacker can force the application to leak memory and perform denial of service attack.

FFmpeg
Ubuntu
libavcodec-ffmpeg56 (Ubuntu package)
libavformat57 (Ubuntu package)
libavresample3 (Ubuntu package)
libavutil55 (Ubuntu package)
libpostproc54 (Ubuntu package)
libswresample2 (Ubuntu package)
libswscale4 (Ubuntu package)
libav-tools (Ubuntu package)
libavcodec-ffmpeg-extra56 (Ubuntu package)
libavcodec-extra (Ubuntu package)
libavdevice-ffmpeg56 (Ubuntu package)
libavfilter-ffmpeg5 (Ubuntu package)
libavformat-ffmpeg56 (Ubuntu package)
libavresample-ffmpeg2 (Ubuntu package)
libavutil-ffmpeg54 (Ubuntu package)
libpostproc-ffmpeg53 (Ubuntu package)
libswresample-ffmpeg1 (Ubuntu package)
libswscale-ffmpeg3 (Ubuntu package)
libavfilter-extra6 (Ubuntu package)
ffmpeg (Ubuntu package)
libavcodec-extra58 (Ubuntu package)
libavcodec58 (Ubuntu package)
libavdevice58 (Ubuntu package)
libavfilter-extra (Ubuntu package)
libavfilter-extra7 (Ubuntu package)
libavfilter7 (Ubuntu package)
libavformat58 (Ubuntu package)
libavutil56 (Ubuntu package)
libavfilter6 (Ubuntu package)
libavdevice57 (Ubuntu package)
libavcodec57 (Ubuntu package)
libavcodec-extra57 (Ubuntu package)
libswscale5 (Ubuntu package)
libswresample3 (Ubuntu package)
libpostproc55 (Ubuntu package)
libavresample4 (Ubuntu package)
Isolation Segment
VMware Tanzu Application Service for VMs

Install updates from vendor's website.

FFmpeg - update to 4.2.1
libavcodec-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavformat57 (Ubuntu package) - update to Ubuntu Pro
libavresample3 (Ubuntu package) - update to Ubuntu Pro
libavutil55 (Ubuntu package) - update to Ubuntu Pro
libpostproc54 (Ubuntu package) - update to Ubuntu Pro
libswresample2 (Ubuntu package) - update to Ubuntu Pro
libswscale4 (Ubuntu package) - update to Ubuntu Pro
libav-tools (Ubuntu package) - update to Ubuntu Pro
libavcodec-ffmpeg-extra56 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra (Ubuntu package) - update to Ubuntu Pro
libavdevice-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavfilter-ffmpeg5 (Ubuntu package) - update to Ubuntu Pro
libavformat-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavresample-ffmpeg2 (Ubuntu package) - update to Ubuntu Pro
libavutil-ffmpeg54 (Ubuntu package) - update to Ubuntu Pro
libpostproc-ffmpeg53 (Ubuntu package) - update to Ubuntu Pro
libswresample-ffmpeg1 (Ubuntu package) - update to Ubuntu Pro
libswscale-ffmpeg3 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra6 (Ubuntu package) - update to Ubuntu Pro
ffmpeg (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra58 (Ubuntu package) - update to Ubuntu Pro
libavcodec58 (Ubuntu package) - update to Ubuntu Pro
libavdevice58 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra7 (Ubuntu package) - update to Ubuntu Pro
libavfilter7 (Ubuntu package) - update to Ubuntu Pro
libavformat58 (Ubuntu package) - update to Ubuntu Pro
libavutil56 (Ubuntu package) - update to Ubuntu Pro
libavfilter6 (Ubuntu package) - update to Ubuntu Pro
libavdevice57 (Ubuntu package) - update to Ubuntu Pro
libavcodec57 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra57 (Ubuntu package) - update to Ubuntu Pro
libswscale5 (Ubuntu package) - update to Ubuntu Pro
libswresample3 (Ubuntu package) - update to Ubuntu Pro
libpostproc55 (Ubuntu package) - update to Ubuntu Pro
libavresample4 (Ubuntu package) - update to Ubuntu Pro
Isolation Segment - addressed in versions 2.11.42, 2.13.27, 3.0.20, 4.0.12
VMware Tanzu Application Service for VMs - addressed in versions 2.11.48, 2.13.30, 3.0.20, 4.0.12

• https://trac.ffmpeg.org/ticket/8284

• Multiple vulnerabilities in FFmpeg
• Ubuntu update for ffmpeg
• VMware Tanzu products update for FFmpeg