UBUNTU-CVE-2024-35369

Source
https://ubuntu.com/security/CVE-2024-35369
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-35369.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-35369
Related
Published
2024-11-29T17:15:00Z
Modified
2025-06-02T17:26:06Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

In FFmpeg version n6.1.1, specifically within the avcodec/speexdec.c module, a potential security vulnerability exists due to insufficient validation of certain parameters when parsing Speex codec extradata. This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process.

References

Affected packages

Ubuntu:Pro:14.04:LTS / libav

Package

Name
libav
Purl
pkg:deb/ubuntu/libav@6:9.20-0ubuntu0.14.04.1+esm1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

6:0.*

6:0.8.7-1ubuntu2

6:9.*

6:9.10-1ubuntu1
6:9.10-1ubuntu2
6:9.10-1ubuntu5
6:9.10-1ubuntu6
6:9.10-1ubuntu7
6:9.11-2ubuntu1
6:9.11-2ubuntu2
6:9.13-0ubuntu0.14.04.1
6:9.14-0ubuntu0.14.04.1
6:9.16-0ubuntu0.14.04.1
6:9.18-0ubuntu0.14.04.1
6:9.20-0ubuntu0.14.04.1
6:9.20-0ubuntu0.14.04.1+esm1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:24.10 / ffmpeg

Package

Name
ffmpeg
Purl
pkg:deb/ubuntu/ffmpeg@7:7.0.2-3ubuntu1.1?arch=source&distro=oracular

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7:7.0.2-3ubuntu1.1

Affected versions

7:6.*

7:6.1.1-3ubuntu5
7:6.1.1-4ubuntu1
7:6.1.1-4ubuntu2
7:6.1.1-4ubuntu3
7:6.1.1-5ubuntu1
7:6.1.1-5ubuntu2
7:6.1.1-5ubuntu3

7:7.*

7:7.0.2-1ubuntu1
7:7.0.2-3ubuntu1

Ecosystem specific

{
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "ffmpeg"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "ffmpeg-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "ffmpeg-doc"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec-extra"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec-extra61"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec-extra61-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec61"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavcodec61-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavdevice-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavdevice61"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavdevice61-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter-extra"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter-extra10"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter-extra10-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter10"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavfilter10-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat-extra"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat-extra61"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat-extra61-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat61"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavformat61-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavutil-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavutil59"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libavutil59-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libpostproc-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libpostproc58"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libpostproc58-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswresample-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswresample5"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswresample5-dbgsym"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswscale-dev"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswscale8"
        },
        {
            "binary_version": "7:7.0.2-3ubuntu1.1",
            "binary_name": "libswscale8-dbgsym"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:25.04 / ffmpeg

Package

Name
ffmpeg
Purl
pkg:deb/ubuntu/ffmpeg@7:7.1.1-1ubuntu1?arch=source&distro=plucky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7:7.1.1-1ubuntu1

Affected versions

7:7.*

7:7.0.2-3ubuntu1
7:7.1-3ubuntu1
7:7.1-3ubuntu2
7:7.1-3ubuntu3
7:7.1-4ubuntu1
7:7.1-4ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "ffmpeg"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "ffmpeg-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "ffmpeg-doc"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec-extra"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec-extra61"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec-extra61-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec61"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavcodec61-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavdevice-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavdevice61"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavdevice61-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter-extra"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter-extra10"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter-extra10-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter10"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavfilter10-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat-extra"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat-extra61"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat-extra61-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat61"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavformat61-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavutil-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavutil59"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libavutil59-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libpostproc-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libpostproc58"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libpostproc58-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswresample-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswresample5"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswresample5-dbgsym"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswscale-dev"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswscale8"
        },
        {
            "binary_version": "7:7.1.1-1ubuntu1",
            "binary_name": "libswscale8-dbgsym"
        }
    ],
    "availability": "No subscription required"
}