FFmpeg allocate_buffers Denial of Service Vulnerability (CVE-2015-6823)

Source: Internet
Author: User

FFmpeg allocate_buffers Denial of Service Vulnerability (CVE-2015-6823)
FFmpeg allocate_buffers Denial of Service Vulnerability (CVE-2015-6823)


Release date:
Updated on:

Affected Systems:

FFmpeg FFmpeg < 2.7.2

Description:

CVE (CAN) ID: CVE-2015-6823

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

Versions earlier than FFmpeg 2.7.2, libavcodec/alac. c's allocate_buffers function does not initialize certain context data, which allows remote attackers to exploit this vulnerability to cause denial of service (memory segment exception) by constructing ALAC data ).

<* Source: Mateusz "j00ru" Jurczyk
Gynvael Coldwind
Samuel Gro & #223;
*>

Suggestion:

Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.videolan.org /? P = ffmpeg. git; a = commit; h = f7068bf277a37479aecde2832208d820682b35e6

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address:

Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.