CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2018-1999013

FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains a use-after-free vulnerability in the realmedia demuxer that can result in vulnerability allows attacker to read heap memory. This attack appear to be exploitable via specially crafted RM file has to be provided as input. This vulnerability appears to have been fixed in a7e032a277452366771951e29fd0bf2bd5c029f0 and later.

Score
6.5 medium
Published
2018-07-23
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
multimedia/ffmpeg3ffmpeg33.0.2_1unaddressedkreinholz@gmail.com

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>ffmpeg3</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>FFmpeg before commit a7e032a277452366771951e29fd0bf2bd5c029f0 contains
	a use-after-free vulnerability in the realmedia demuxer that can
	result in vulnerability allows attacker to read heap memory. This
	attack appear to be exploitable via specially crafted RM file has to
	be provided as input. This vulnerability appears to have been fixed in
	a7e032a277452366771951e29fd0bf2bd5c029f0 and later.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2018-1999013</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2018-1999013</url>
    </references>
    <dates>
      <discovery>2018-07-23</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>