CVE-2018-1999010 Memory corruption in n/a
FFmpeg contains out-of-bounds read vulnerabilities in the MMS protocol allowing attackers to access memory or cause crashes via network connectivity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-1999010?
CVE-2018-1999010 is a critical memory corruption vulnerability in Debian Debian Linux, published on 23 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
FFmpeg before commit cced03dd667a5df6df8fd40d8de0bff477ee02e8 contains multiple out of array access vulnerabilities in the mms protocol that can result in attackers accessing out of bound data. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in cced03dd667a5df6df8fd40d8de0bff477ee02e8 and later.
Weakness: CWE-125
Which versions are affected by CVE-2018-1999010?
It affects 2 products.
Products include Debian Debian Linux, Ffmpeg Ffmpeg.
How do I fix CVE-2018-1999010?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-1999010 being exploited?
There is no known exploitation of CVE-2018-1999010 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as CLEANSTART-2024-ZP45224, DEBIAN-CVE-2018-1999010, GHSA-463v-8hm6-rvhp, UBUNTU-CVE-2018-1999010.