CVE-2018-1999015 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-1999015 Interim 1 17 2025-02-17T02:26:18Z current 2021-05-30T14:20:56Z 2025-02-17T02:26:18Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-1999015 FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to have been fixed in 5aba5b89d0b1d73164d3b81764828bb8b20ff32a and later. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise Module for Package Hub 15 SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Workstation Extension 15 ffmpeg libavcodec-devel libavcodec57 libavcodec57-32bit libavdevice-devel libavdevice57 libavdevice57-32bit libavfilter-devel libavfilter6 libavfilter6-32bit libavformat-devel libavformat57 libavformat57-32bit libavresample-devel libavresample3 libavresample3-32bit libavutil-devel libavutil55 libavutil55-32bit libpostproc-devel libpostproc54 libpostproc54-32bit libswresample-devel libswresample2 libswresample2-32bit libswscale-devel libswscale4 libswscale4-32bit libavcodec-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavcodec57 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavcodec57-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavdevice-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavdevice57 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavdevice57-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavfilter-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavfilter6 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavfilter6-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavformat-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavformat57 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavformat57-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavresample-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavresample3 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavresample3-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavutil-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavutil55 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavutil55-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpostproc-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpostproc54 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libpostproc54-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswresample-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswresample2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswresample2-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswscale-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswscale4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libswscale4-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS ffmpeg as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libavcodec57 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libavutil-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libavutil55 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libpostproc-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libpostproc54 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libswresample-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libswresample2 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libswscale-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 libswscale4 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 ffmpeg as a component of SUSE Linux Enterprise Module for Desktop Applications 15 ffmpeg as a component of SUSE Linux Enterprise Module for Package Hub 15 libavdevice57 as a component of SUSE Linux Enterprise Module for Package Hub 15 libavfilter6 as a component of SUSE Linux Enterprise Module for Package Hub 15 ffmpeg as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 libavdevice57 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 libavfilter6 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 libavcodec-devel as a component of SUSE Linux Enterprise Workstation Extension 15 libavformat-devel as a component of SUSE Linux Enterprise Workstation Extension 15 libavformat57 as a component of SUSE Linux Enterprise Workstation Extension 15 libavresample-devel as a component of SUSE Linux Enterprise Workstation Extension 15 libavresample3 as a component of SUSE Linux Enterprise Workstation Extension 15 ffmpeg as a component of SUSE Linux Enterprise Workstation Extension 15 FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to have been fixed in 5aba5b89d0b1d73164d3b81764828bb8b20ff32a and later. CVE-2018-1999015 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:ffmpeg SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavcodec-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavcodec57 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavcodec57-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavdevice-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavdevice57 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavdevice57-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavfilter-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavfilter6 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavfilter6-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavformat-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavformat57 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavformat57-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavresample-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavresample3 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavresample3-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavutil-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavutil55 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libavutil55-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpostproc-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpostproc54 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libpostproc54-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswresample-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswresample2 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswresample2-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswscale-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswscale4 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libswscale4-32bit SUSE Linux Enterprise Module for Desktop Applications 15:ffmpeg SUSE Linux Enterprise Module for Desktop Applications 15:libavcodec57 SUSE Linux Enterprise Module for Desktop Applications 15:libavutil-devel SUSE Linux Enterprise Module for Desktop Applications 15:libavutil55 SUSE Linux Enterprise Module for Desktop Applications 15:libpostproc-devel SUSE Linux Enterprise Module for Desktop Applications 15:libpostproc54 SUSE Linux Enterprise Module for Desktop Applications 15:libswresample-devel SUSE Linux Enterprise Module for Desktop Applications 15:libswresample2 SUSE Linux Enterprise Module for Desktop Applications 15:libswscale-devel SUSE Linux Enterprise Module for Desktop Applications 15:libswscale4 SUSE Linux Enterprise Module for Package Hub 15 SP1:ffmpeg SUSE Linux Enterprise Module for Package Hub 15 SP1:libavdevice57 SUSE Linux Enterprise Module for Package Hub 15 SP1:libavfilter6 SUSE Linux Enterprise Module for Package Hub 15:ffmpeg SUSE Linux Enterprise Module for Package Hub 15:libavdevice57 SUSE Linux Enterprise Module for Package Hub 15:libavfilter6 SUSE Linux Enterprise Workstation Extension 15:ffmpeg SUSE Linux Enterprise Workstation Extension 15:libavcodec-devel SUSE Linux Enterprise Workstation Extension 15:libavformat-devel SUSE Linux Enterprise Workstation Extension 15:libavformat57 SUSE Linux Enterprise Workstation Extension 15:libavresample-devel SUSE Linux Enterprise Workstation Extension 15:libavresample3 moderate 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N 4.4 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L