Off-by-one in FFmpeg - CVE-2024-31585

Vulnerability identifier: #VU89302

CSH Severity: High

CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-31585

CWE-ID: CWE-193

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to an off-by-one error in libavfilter/avf_showspectrum.c. A remote attacker can trigger an off-by-one error and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

FFmpeg
Debian Linux
Fedora
Ubuntu
openEuler
libavdevice58 (Ubuntu package)
libswresample3 (Ubuntu package)
libpostproc55 (Ubuntu package)
libavutil56 (Ubuntu package)
libavformat58 (Ubuntu package)
libavformat-extra58 (Ubuntu package)
libavformat-extra (Ubuntu package)
libavfilter7 (Ubuntu package)
libavfilter-extra7 (Ubuntu package)
libswscale5 (Ubuntu package)
libavcodec58 (Ubuntu package)
libavcodec-extra58 (Ubuntu package)
libavformat-ffmpeg56 (Ubuntu package)
libswscale7 (Ubuntu package)
libavresample-ffmpeg2 (Ubuntu package)
libswresample4 (Ubuntu package)
libavutil-ffmpeg54 (Ubuntu package)
libpostproc57 (Ubuntu package)
libavresample3 (Ubuntu package)
libavfilter-ffmpeg5 (Ubuntu package)
libavdevice-ffmpeg56 (Ubuntu package)
libavcodec-ffmpeg56 (Ubuntu package)
libavcodec-ffmpeg-extra56 (Ubuntu package)
libswscale4 (Ubuntu package)
libswresample2 (Ubuntu package)
libpostproc54 (Ubuntu package)
libavutil55 (Ubuntu package)
libpostproc-ffmpeg53 (Ubuntu package)
libavformat57 (Ubuntu package)
libavfilter6 (Ubuntu package)
libavfilter-extra6 (Ubuntu package)
libavdevice57 (Ubuntu package)
libavcodec57 (Ubuntu package)
libavcodec-extra57 (Ubuntu package)
libavresample4 (Ubuntu package)
libavutil58 (Ubuntu package)
ffmpeg (Ubuntu package)
libavcodec-extra60 (Ubuntu package)
libavcodec60 (Ubuntu package)
libavdevice60 (Ubuntu package)
libavfilter-extra9 (Ubuntu package)
libavfilter9 (Ubuntu package)
libavformat-extra60 (Ubuntu package)
libswscale-ffmpeg3 (Ubuntu package)
libswresample-ffmpeg1 (Ubuntu package)
libavformat60 (Ubuntu package)
ffmpeg-debuginfo
ffmpeg
libavdevice
ffmpeg-libs
ffmpeg-devel
ffmpeg-debugsource
ffmpeg (Debian package)
chromium

Install updates from vendor's website.

libavdevice58 (Ubuntu package) - update to Ubuntu Pro
libswresample3 (Ubuntu package) - update to Ubuntu Pro
libpostproc55 (Ubuntu package) - update to Ubuntu Pro
libavutil56 (Ubuntu package) - update to Ubuntu Pro
libavformat58 (Ubuntu package) - update to Ubuntu Pro
libavformat-extra58 (Ubuntu package) - update to Ubuntu Pro
libavformat-extra (Ubuntu package) - update to Ubuntu Pro
libavfilter7 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra7 (Ubuntu package) - update to Ubuntu Pro
libswscale5 (Ubuntu package) - update to Ubuntu Pro
libavcodec58 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra58 (Ubuntu package) - update to Ubuntu Pro
libavformat-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libswscale7 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavresample-ffmpeg2 (Ubuntu package) - update to Ubuntu Pro
libswresample4 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavutil-ffmpeg54 (Ubuntu package) - update to Ubuntu Pro
libpostproc57 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavresample3 (Ubuntu package) - update to Ubuntu Pro
libavfilter-ffmpeg5 (Ubuntu package) - update to Ubuntu Pro
libavdevice-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavcodec-ffmpeg56 (Ubuntu package) - update to Ubuntu Pro
libavcodec-ffmpeg-extra56 (Ubuntu package) - update to Ubuntu Pro
libswscale4 (Ubuntu package) - update to Ubuntu Pro
libswresample2 (Ubuntu package) - update to Ubuntu Pro
libpostproc54 (Ubuntu package) - update to Ubuntu Pro
libavutil55 (Ubuntu package) - update to Ubuntu Pro
libpostproc-ffmpeg53 (Ubuntu package) - update to Ubuntu Pro
libavformat57 (Ubuntu package) - update to Ubuntu Pro
libavfilter6 (Ubuntu package) - update to Ubuntu Pro
libavfilter-extra6 (Ubuntu package) - update to Ubuntu Pro
libavdevice57 (Ubuntu package) - update to Ubuntu Pro
libavcodec57 (Ubuntu package) - update to Ubuntu Pro
libavcodec-extra57 (Ubuntu package) - update to Ubuntu Pro
libavresample4 (Ubuntu package) - update to Ubuntu Pro
libavutil58 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
ffmpeg (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavcodec-extra60 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavcodec60 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavdevice60 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavfilter-extra9 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavfilter9 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libavformat-extra60 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
libswscale-ffmpeg3 (Ubuntu package) - update to Ubuntu Pro
libswresample-ffmpeg1 (Ubuntu package) - update to Ubuntu Pro
libavformat60 (Ubuntu package) - addressed in versions Ubuntu Pro, 7:6.0-6ubuntu1.1
ffmpeg-debuginfo - addressed in versions 4.2.4-17, 4.2.4-18
ffmpeg - addressed in versions 4.2.4-17, 4.2.4-18
libavdevice - addressed in versions 4.2.4-17, 4.2.4-18
ffmpeg-libs - addressed in versions 4.2.4-17, 4.2.4-18
ffmpeg-devel - addressed in versions 4.2.4-17, 4.2.4-18
ffmpeg-debugsource - addressed in versions 4.2.4-17, 4.2.4-18
ffmpeg (Debian package) - update to 7:5.1.5-0+deb12u1
chromium - addressed in versions 124.0.6367.78-1.el9, 124.0.6367.91-1.el9, 124.0.6367.118-1.el9, 124.0.6367.118-2.el8, 124.0.6367.155-1.el8, 124.0.6367.155-1.el9, 124.0.6367.155-1.fc38, 124.0.6367.155-1.fc39, 124.0.6367.155-1.fc40, 124.0.6367.201-1.el8, 124.0.6367.201-1.el9, 124.0.6367.201-1.fc38, 125.0.6422.60-1.el8, 125.0.6422.60-1.el9, 125.0.6422.60-1.fc38, 125.0.6422.76-1.el8, 125.0.6422.76-1.el9

• https://github.com/ffmpeg/ffmpeg/commit/ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06
• https://github.com/FFmpeg/FFmpeg/commit/81df787b53eb5c6433731f6eaaf7f2a94d8a8c80
• https://gist.github.com/1047524396/dc2c64ffe0c3934a6176bcd2c5cf5656

• Multiple vulnerabilities in FFmpeg
• Fedora EPEL 9 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora EPEL 8 update for chromium
• Fedora 39 update for chromium
• Fedora 38 update for chromium
• Fedora 40 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora EPEL 8 update for chromium
• Fedora EPEL 8 update for chromium
• Fedora 38 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora 38 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora EPEL 8 update for chromium
• Fedora EPEL 9 update for chromium
• Fedora EPEL 8 update for chromium
• Debian update for ffmpeg
• Ubuntu update for ffmpeg
• openEuler 22.03 LTS SP3 update for ffmpeg
• openEuler 20.03 LTS SP4 update for ffmpeg
• openEuler 22.03 LTS SP4 update for ffmpeg
• openEuler 22.03 LTS SP1 update for ffmpeg