Bugzilla – Bug 1205388
VUL-0: CVE-2022-3964: ffmpeg-4,ffmpeg: out of bounds read in update_block_in_prev_frame()
Last modified: 2023-03-02 15:20:17 UTC
CVE-2022-3964 A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. The manipulation of the argument y_size leads to out-of-bounds read. It is possible to initiate the attack remotely. The name of the patch is 92f9b28ed84a77138105475beba16c146bdaf984. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213543. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3964 http://www.cvedetails.com/cve/CVE-2022-3964/
Affected: - SUSE:SLE-15-SP4:Update/ffmpeg-4 - openSUSE:Factory/ffmpeg-4 - openSUSE:Factory/ffmpeg-5
rpza is not enabled in openSUSE.
Hi Alynx, could you help on this please? Thanks.
https://build.suse.de/request/show/284471 for SLE-15-SP4
https://build.opensuse.org/request/show/1035934 https://build.opensuse.org/request/show/1035934 for Factory
This is an autogenerated message for OBS integration: This bug (1205388) was mentioned in https://build.opensuse.org/request/show/1036209 Factory / ffmpeg-5 https://build.opensuse.org/request/show/1036210 Factory / ffmpeg-4
SUSE-SU-2022:4194-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1205388 CVE References: CVE-2022-3964 JIRA References: Sources used: openSUSE Leap 15.4 (src): ffmpeg-4-4.4-150400.3.5.1 SUSE Linux Enterprise Workstation Extension 15-SP4 (src): ffmpeg-4-4.4-150400.3.5.1 SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP4 (src): ffmpeg-4-4.4-150400.3.5.1 SUSE Linux Enterprise Module for Desktop Applications 15-SP4 (src): ffmpeg-4-4.4-150400.3.5.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination.
Released, closing.