FFmpeg sws_init_context Denial of Service Vulnerability (CVE-2015-6824)

FFmpeg sws_init_context Denial of Service Vulnerability (CVE-2015-6824)
FFmpeg sws_init_context Denial of Service Vulnerability (CVE-2015-6824)

Release date:
Updated on:

Affected Systems:

FFmpeg FFmpeg < 2.7.2

Description:

CVE (CAN) ID: CVE-2015-6824

FFmpeg is a free software that allows you to perform video, transfer, and stream functions in multiple formats of audio and video.

Versions earlier than FFmpeg 2.7.2, libswscale/utils. c's sws_init_context function does not initialize certain pixbuf data structures, which allows remote attackers to exploit this vulnerability to cause denial of service (memory segment exception) by constructing video data ).

<* Source: Mateusz "j00ru" Jurczyk
Gynvael Coldwind
Samuel Gro & #223;
*>

Suggestion:

Vendor patch:

FFmpeg
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.videolan.org /? P = ffmpeg. git; a = commit; h = a5d44d5c220e12ca0cb7a4eceb0f74759cb000011

Compile FFmpeg in Linux to download and compile the source file

Linux compiling and upgrading FFmpeg

Install FFMPEG on CentOS 5.6

Install FFmpeg in Ubuntu

Compile ffmpeg in Ubuntu 12.04

Install FFmpeg 2.2.2 In PPA in Ubuntu 14.04

FFmpeg details: click here
FFmpeg: click here

This article permanently updates the link address: