Bug 1223087 (CVE-2024-31585) - VUL-0: CVE-2024-31585: ffmpeg,ffmpeg-4: off-by-one error in libavfilter/avf_showspectrum.c.
Summary: VUL-0: CVE-2024-31585: ffmpeg,ffmpeg-4: off-by-one error in libavfilter/avf_s...
Status: IN_PROGRESS
Alias: CVE-2024-31585
Product: openSUSE Distribution
Classification: openSUSE
Component: Other (show other bugs)
Version: Leap 15.5
Hardware: Other Other
: P3 - Medium : Normal (vote)
Target Milestone: ---
Assignee: Security Team bot
QA Contact: E-mail List
URL: https://smash.suse.de/issue/402503/
Whiteboard: CVSSv3.1:SUSE:CVE-2024-31585:7.5:(AV:...
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-18 14:07 UTC by SMASH SMASH
Modified: 2024-05-06 07:48 UTC (History)
4 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-04-18 14:07:18 UTC
FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-31585
https://www.cve.org/CVERecord?id=CVE-2024-31585
https://gist.github.com/1047524396/dc2c64ffe0c3934a6176bcd2c5cf5656
https://github.com/FFmpeg/FFmpeg/commit/81df787b53eb5c6433731f6eaaf7f2a94d8a8c80
https://github.com/ffmpeg/ffmpeg/commit/ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06
Comment 1 Camila Camargo de Matos 2024-04-18 14:09:42 UTC
As per the fix commit description (see [0]), this issue was introduced by commit 81df787 [1], or, in other words, it was introduced in FFmpeg version 5.1. This means that affected versions are only 5.1 and later.

[0] https://github.com/ffmpeg/ffmpeg/commit/ab0fdaed
[1] https://github.com/FFmpeg/FFmpeg/commit/81df787b
Comment 3 Camila Camargo de Matos 2024-04-18 14:11:38 UTC
In openSUSE:Factory, the following packages are affected:

- openSUSE:Factory/ffmpeg-5

openSUSE:Factory/ffmpeg-6 is not affected, as the fix is already present in the code.
Comment 4 Cliff Zhao 2024-04-22 13:56:22 UTC
@jengelh:
Don't change the bug assignee, I'm already working on this bug.
Comment 5 OBSbugzilla Bot 2024-04-22 17:16:14 UTC
This is an autogenerated message for OBS integration:
This bug (1223087) was mentioned in
https://build.opensuse.org/request/show/1169719 Factory / ffmpeg-5