FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365)

FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365)
FFmpeg smka_decode_frame Function Denial of Service Vulnerability (CVE-2015-8365)

Release date:
Updated on:

Affected Systems:

FFmpeg FFmpeg < 2.6.5
FFmpeg FFmpeg 2.8.x-2.8.2
FFmpeg FFmpeg 2.7.x-2.7.3

Description:

CVE (CAN) ID: CVE-2015-8365

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

Versions earlier than FFmpeg 2.6.5, 2.7.x-2.7.3, 2.8.x-2.8.2, and libavcodec/smacker. c's smka_decode_frame function does not verify whether the data size is consistent with the number of channels. Remote attackers can exploit this vulnerability to cause denial of service (out-of-bounds array access ).

<* Source: Mateusz "j00ru" Jurczyk
Gynvael Coldwind
*>

Suggestion:

Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.videolan.org /? P = ffmpeg. git; a = commit; h = 4a9af07a000095e014b059c1ab624c40345af5892

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address: