CVE and update status of the FreeBSD ports tree4,826 unaddressed CVEs in 618 portsAll times are CET

CVE details

CVE-2018-1999014

FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS. This attack appear to be exploitable via specially crafted MXF file which has to be provided as input. This vulnerability appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 and later.

Score
6.5 medium
Published
2018-07-23
Links
NVD · cve.org

Affected ports (1)

PortPackageVersionStatusMaintainer
multimedia/ffmpeg3ffmpeg33.0.2_1unaddressedkreinholz@gmail.com

Template for a VuXML entry

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>ffmpeg3</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains
	an out of array access vulnerability in MXF format demuxer that can
	result in DoS. This attack appear to be exploitable via specially
	crafted MXF file which has to be provided as input. This vulnerability
	appears to have been fixed in bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75
	and later.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2018-1999014</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2018-1999014</url>
    </references>
    <dates>
      <discovery>2018-07-23</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>