p PatchFirst

CVE-2018-13302

CVE-2018-13302

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In FFmpeg 4.0.1, improper handling of frame types (other than EAC3_FRAME_TYPE_INDEPENDENT) that have multiple independent substreams in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4, leading to a denial of service or possibly unspecified other impact.

CVSS 8.8 · High · EPSS 2.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • ffmpeg Debian:12

    Affected ranges
    • ECOSYSTEM: < 7:3.4.3-1

    Update to 7:3.4.3-1

  • ffmpeg Debian:13

    Affected ranges
    • ECOSYSTEM: < 7:3.4.3-1

    Update to 7:3.4.3-1

  • ffmpeg Debian:14

    Affected ranges
    • ECOSYSTEM: < 7:3.4.3-1

    Update to 7:3.4.3-1

  • ffmpeg Ubuntu:16.04:LTS

    Versions
    • 7:2.7.2-1build1
    • 7:2.8.1-1ubuntu1
    • 7:2.8.2-1ubuntu1
    • 7:2.8.3-1
    • 7:2.8.4-1
    • 7:2.8.4-1ubuntu1
    • 7:2.8.4-1ubuntu2
    • 7:2.8.4-1ubuntu3
    • 7:2.8.4-1ubuntu4
    • 7:2.8.6-1ubuntu1
    • 7:2.8.6-1ubuntu2
    • 7:2.8.8-0ubuntu0.16.04.1
    • 7:2.8.10-0ubuntu0.16.04.1
    • 7:2.8.11-0ubuntu0.16.04.1
    • 7:2.8.14-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: < 7:2.8.15-0ubuntu0.16.04.1

    Update to 7:2.8.15-0ubuntu0.16.04.1

  • oxide-qt Ubuntu:16.04:LTS

    Versions
    • 1.9.5-0ubuntu1
    • 1.10.3-0ubuntu0.15.10.1
    • 1.10.3-0ubuntu0.15.10.2
    • 1.11.3-0ubuntu3
    • 1.11.4-0ubuntu1
    • 1.11.5-0ubuntu1
    • 1.12.5-0ubuntu1
    • 1.12.6-0ubuntu1
    • 1.12.7-0ubuntu1
    • 1.13.6-0ubuntu1
    • 1.14.7-0ubuntu1
    • 1.14.9-0ubuntu0.16.04.1
    • 1.15.7-0ubuntu0.16.04.1
    • 1.15.8-0ubuntu0.16.04.1
    • 1.16.5-0ubuntu0.16.04.1
    • 1.17.7-0ubuntu0.16.04.1
    • 1.17.9-0ubuntu0.16.04.1
    • 1.18.3-0ubuntu0.16.04.1
    • 1.18.5-0ubuntu0.16.04.1
    • 1.19.4-0ubuntu0.16.04.1
    • 1.20.4-0ubuntu0.16.04.1
    • 1.21.5-0ubuntu0.16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gst-libav1.0 Ubuntu:16.04:LTS

    Versions
    • 1.6.0-1
    • 1.6.0-2
    • 1.6.1-1
    • 1.6.2-1
    • 1.7.1-1
    • 1.7.2-1
    • 1.7.90-1
    • 1.8.0-1
    • 1.8.1-1~ubuntu1
    • 1.8.2-1~ubuntu1
    • 1.8.3-1ubuntu0.1
    • 1.8.3-1ubuntu0.2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • kino Ubuntu:16.04:LTS

    Versions
    • 1.3.4-2.1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mythtv Ubuntu:16.04:LTS

    Versions
    • 2:0.27.1+fixes.20140624.aa822f5-0ubuntu6
    • 2:0.27.1+fixes.20140624.aa822f5-0ubuntu7
    • 2:0.27.1+fixes.20140624.aa822f5-0ubuntu9
    • 2:0.28.0+fixes.20160217.44fd8a6-0ubuntu4
    • 2:0.28.0+fixes.20160229.ae35a28-0ubuntu1
    • 2:0.28.0+fixes.20160321.39e409d-0ubuntu1
    • 2:0.28.0+fixes.20160321.39e409d-0ubuntu2
    • 2:0.28.0+fixes.20160325.2520617-0ubuntu3
    • 2:0.28.0+fixes.20160413.15cf421-0ubuntu1
    • 2:0.28.0+fixes.20160413.15cf421-0ubuntu2
    • 2:0.28.0+fixes.20160413.15cf421-0ubuntu2.16.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • ffmpeg Ubuntu:18.04:LTS

    Versions
    • 7:3.3.4-2
    • 7:3.3.4-2build3
    • 7:3.4-2ubuntu2
    • 7:3.4-4
    • 7:3.4-4build1
    • 7:3.4.1-1
    • 7:3.4.1-1build1
    • 7:3.4.2-1
    • 7:3.4.2-1build1
    • 7:3.4.2-2
    Affected ranges
    • ECOSYSTEM: < 7:3.4.4-0ubuntu0.18.04.1

    Update to 7:3.4.4-0ubuntu0.18.04.1

  • gst-libav1.0 Ubuntu:18.04:LTS

    Versions
    • 1.12.2-1
    • 1.12.3-1
    • 1.12.4-1
    • 1.13.91-1
    • 1.14.0-1
    • 1.14.1-1~ubuntu18.04.1
    • 1.14.4-0ubuntu1~ubuntu18.04.1
    • 1.14.5-0ubuntu1~18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • kino Ubuntu:18.04:LTS

    Versions
    • 1.3.4-2.3
    • 1.3.4-2.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mythtv Ubuntu:18.04:LTS

    Versions
    • 2:29.0+fixes.20170728.696806310a-0ubuntu1
    • 2:29.0+fixes.20170728.696806310a-0ubuntu3
    • 2:29.0+fixes.20170728.696806310a-0ubuntu4
    • 2:29.0+fixes.20170728.696806310a-0ubuntu5
    • 2:29.0+fixes.20170728.696806310a-0ubuntu6
    • 2:29.0+fixes.20170728.696806310a-0ubuntu7
    • 2:29.0+fixes.20170728.696806310a-0ubuntu8
    • 2:29.1+fixes.20180220.9b7b962-0ubuntu2
    • 2:29.1+fixes.20180220.9b7b962-0ubuntu3
    • 2:29.1+fixes.20180414.329c235-0ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gst-libav1.0 Ubuntu:20.04:LTS

    Versions
    • 1.16.1-1
    • 1.16.2-1
    • 1.16.2-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • kino Ubuntu:20.04:LTS

    Versions
    • 1.3.4+dfsg0-1
    • 1.3.4+dfsg0-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mythtv Ubuntu:20.04:LTS

    Versions
    • 2:30.0+fixes.20190817.5cde0578d8-0ubuntu1
    • 2:30.0+fixes.20190817.5cde0578d8-0ubuntu2
    • 2:30.0+fixes.20190817.5cde0578d8-0ubuntu3
    • 2:31.0+fixes.20200207.35cb9ed0c5-0ubuntu2
    • 2:31.0+fixes.20200323.9579662cdc-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • chromium-browser Ubuntu:22.04:LTS

    Versions
    • 1:85.0.4183.83-0ubuntu2
    • 1:85.0.4183.83-0ubuntu2.22.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gst-libav1.0 Ubuntu:22.04:LTS

    Versions
    • 1.18.5-1
    • 1.20.0-1
    • 1.20.1-1
    • 1.20.3-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • kino Ubuntu:22.04:LTS

    Versions
    • 1.3.4+dfsg0-1build2
    • 1.3.4+dfsg0-1.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mythtv Ubuntu:22.04:LTS

    Versions
    • 2:31.0+fixes.20200323.9579662cdc-0ubuntu9
    • 2:31.0+fixes.20200323.9579662cdc-0ubuntu11
    • 2:32.0+fixes.20220224.56275b303b-0ubuntu3
    • 2:32.0+fixes.20220224.56275b303b-0ubuntu5
    • 2:32.0+fixes.20220325.f69ce764b7-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • chromium-browser Ubuntu:24.04:LTS

    Versions
    • 1:85.0.4183.83-0ubuntu3
    • 2:1snap1-0ubuntu1
    • 2:1snap1-0ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • gst-libav1.0 Ubuntu:24.04:LTS

    Versions
    • 1.22.5-1
    • 1.22.6-1
    • 1.22.7-1
    • 1.22.8-1
    • 1.22.10-1
    • 1.24.1-1
    • 1.24.1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mythtv Ubuntu:24.04:LTS

    Versions
    • 2:33.0+fixes.20230210.026e506-0ubuntu0
    • 2:33.0+fixes.20230210.026e506-0ubuntu2
    • 2:33.0+fixes.20230210.026e506-0ubuntu3
    • 2:33.0+fixes.20230210.026e506-0ubuntu4
    • 2:33.0+fixes.20230210.026e506-0ubuntu5
    • 2:34.0+fixes.20240210.e3e165a1-0ubuntu1
    • 2:34.0+fixes.20240210.e3e165a1-0ubuntu4
    • 2:34.0+fixes.20240210.e3e165a1-0ubuntu5
    • 2:34.0+fixes.20240210.e3e165a1-0ubuntu6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • chromium-browser Ubuntu:25.10

    Versions
    • 2:1snap1-0ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →