CVE-2018-7751 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-7751 Interim 1 9 2022-10-15T15:53:54Z current 2021-05-30T14:11:38Z 2022-10-15T15:53:54Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-7751 The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 openSUSE Leap 15.2 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed ffmpeg-4-4.4-5.2 ffmpeg-4-libavcodec-devel-4.4-5.2 ffmpeg-4-libavdevice-devel-4.4-5.2 ffmpeg-4-libavfilter-devel-4.4-5.2 ffmpeg-4-libavformat-devel-4.4-5.2 ffmpeg-4-libavresample-devel-4.4-5.2 ffmpeg-4-libavutil-devel-4.4-5.2 ffmpeg-4-libpostproc-devel-4.4-5.2 ffmpeg-4-libswresample-devel-4.4-5.2 ffmpeg-4-libswscale-devel-4.4-5.2 ffmpeg-4-private-devel-4.4-5.2 libavcodec58-4.2.1-lp152.1.6 libavcodec58_134-32bit-4.4-5.2 libavcodec58_134-4.4-150400.1.13 libavcodec58_134-4.4-5.2 libavcodec58_134-4.4-bp153.1.1 libavdevice58-4.2.1-lp152.1.2 libavdevice58_13-32bit-4.4-5.2 libavdevice58_13-4.4-150400.1.13 libavdevice58_13-4.4-5.2 libavdevice58_13-4.4-bp153.1.1 libavfilter7-4.2.1-lp152.1.6 libavfilter7_110-32bit-4.4-5.2 libavfilter7_110-4.4-150400.1.13 libavfilter7_110-4.4-5.2 libavfilter7_110-4.4-bp153.1.1 libavformat58-4.2.1-lp152.1.6 libavformat58_76-32bit-4.4-5.2 libavformat58_76-4.4-150400.1.13 libavformat58_76-4.4-5.2 libavformat58_76-4.4-bp153.1.1 libavresample4-4.2.1-lp152.1.6 libavresample4_0-32bit-4.4-5.2 libavresample4_0-4.4-150400.1.13 libavresample4_0-4.4-5.2 libavresample4_0-4.4-bp153.1.1 libavutil56-4.2.1-lp152.1.6 libavutil56_70-32bit-4.4-5.2 libavutil56_70-4.4-150400.1.13 libavutil56_70-4.4-5.2 libavutil56_70-4.4-bp153.1.1 libpostproc55-4.2.1-lp152.1.6 libpostproc55_9-32bit-4.4-5.2 libpostproc55_9-4.4-150400.1.13 libpostproc55_9-4.4-5.2 libpostproc55_9-4.4-bp153.1.1 libswresample3-4.2.1-lp152.1.6 libswresample3_9-32bit-4.4-5.2 libswresample3_9-4.4-150400.1.13 libswresample3_9-4.4-5.2 libswresample3_9-4.4-bp153.1.1 libswscale5-4.2.1-lp152.1.6 libswscale5_9-32bit-4.4-5.2 libswscale5_9-4.4-150400.1.13 libswscale5_9-4.4-5.2 libswscale5_9-4.4-bp153.1.1 libavcodec58_134-4.4-150400.1.13 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libavutil56_70-4.4-150400.1.13 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libswresample3_9-4.4-150400.1.13 as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 libavformat58_76-4.4-150400.1.13 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libswscale5_9-4.4-150400.1.13 as a component of SUSE Linux Enterprise Workstation Extension 15 SP4 libavcodec58-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libavdevice58-4.2.1-lp152.1.2 as a component of openSUSE Leap 15.2 libavfilter7-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libavformat58-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libavresample4-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libavutil56-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libpostproc55-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libswresample3-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libswscale5-4.2.1-lp152.1.6 as a component of openSUSE Leap 15.2 libavcodec58_134-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavdevice58_13-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavfilter7_110-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavformat58_76-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavresample4_0-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavutil56_70-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libpostproc55_9-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libswresample3_9-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libswscale5_9-4.4-bp153.1.1 as a component of openSUSE Leap 15.3 libavcodec58_134-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libavdevice58_13-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libavfilter7_110-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libavformat58_76-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libavresample4_0-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libavutil56_70-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libpostproc55_9-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libswresample3_9-4.4-150400.1.13 as a component of openSUSE Leap 15.4 libswscale5_9-4.4-150400.1.13 as a component of openSUSE Leap 15.4 ffmpeg-4-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavcodec-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavdevice-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavfilter-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavformat-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavresample-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libavutil-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libpostproc-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libswresample-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-libswscale-devel-4.4-5.2 as a component of openSUSE Tumbleweed ffmpeg-4-private-devel-4.4-5.2 as a component of openSUSE Tumbleweed libavcodec58_134-4.4-5.2 as a component of openSUSE Tumbleweed libavcodec58_134-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libavdevice58_13-4.4-5.2 as a component of openSUSE Tumbleweed libavdevice58_13-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libavfilter7_110-4.4-5.2 as a component of openSUSE Tumbleweed libavfilter7_110-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libavformat58_76-4.4-5.2 as a component of openSUSE Tumbleweed libavformat58_76-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libavresample4_0-4.4-5.2 as a component of openSUSE Tumbleweed libavresample4_0-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libavutil56_70-4.4-5.2 as a component of openSUSE Tumbleweed libavutil56_70-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libpostproc55_9-4.4-5.2 as a component of openSUSE Tumbleweed libpostproc55_9-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libswresample3_9-4.4-5.2 as a component of openSUSE Tumbleweed libswresample3_9-32bit-4.4-5.2 as a component of openSUSE Tumbleweed libswscale5_9-4.4-5.2 as a component of openSUSE Tumbleweed libswscale5_9-32bit-4.4-5.2 as a component of openSUSE Tumbleweed The svg_probe function in libavformat/img2dec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (Infinite Loop) via a crafted XML file. CVE-2018-7751 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libavcodec58_134-4.4-150400.1.13 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libavutil56_70-4.4-150400.1.13 SUSE Linux Enterprise Module for Desktop Applications 15 SP4:libswresample3_9-4.4-150400.1.13 SUSE Linux Enterprise Workstation Extension 15 SP4:libavformat58_76-4.4-150400.1.13 SUSE Linux Enterprise Workstation Extension 15 SP4:libswscale5_9-4.4-150400.1.13 openSUSE Leap 15.2:libavcodec58-4.2.1-lp152.1.6 openSUSE Leap 15.2:libavdevice58-4.2.1-lp152.1.2 openSUSE Leap 15.2:libavfilter7-4.2.1-lp152.1.6 openSUSE Leap 15.2:libavformat58-4.2.1-lp152.1.6 openSUSE Leap 15.2:libavresample4-4.2.1-lp152.1.6 openSUSE Leap 15.2:libavutil56-4.2.1-lp152.1.6 openSUSE Leap 15.2:libpostproc55-4.2.1-lp152.1.6 openSUSE Leap 15.2:libswresample3-4.2.1-lp152.1.6 openSUSE Leap 15.2:libswscale5-4.2.1-lp152.1.6 openSUSE Leap 15.3:libavcodec58_134-4.4-bp153.1.1 openSUSE Leap 15.3:libavdevice58_13-4.4-bp153.1.1 openSUSE Leap 15.3:libavfilter7_110-4.4-bp153.1.1 openSUSE Leap 15.3:libavformat58_76-4.4-bp153.1.1 openSUSE Leap 15.3:libavresample4_0-4.4-bp153.1.1 openSUSE Leap 15.3:libavutil56_70-4.4-bp153.1.1 openSUSE Leap 15.3:libpostproc55_9-4.4-bp153.1.1 openSUSE Leap 15.3:libswresample3_9-4.4-bp153.1.1 openSUSE Leap 15.3:libswscale5_9-4.4-bp153.1.1 openSUSE Leap 15.4:libavcodec58_134-4.4-150400.1.13 openSUSE Leap 15.4:libavdevice58_13-4.4-150400.1.13 openSUSE Leap 15.4:libavfilter7_110-4.4-150400.1.13 openSUSE Leap 15.4:libavformat58_76-4.4-150400.1.13 openSUSE Leap 15.4:libavresample4_0-4.4-150400.1.13 openSUSE Leap 15.4:libavutil56_70-4.4-150400.1.13 openSUSE Leap 15.4:libpostproc55_9-4.4-150400.1.13 openSUSE Leap 15.4:libswresample3_9-4.4-150400.1.13 openSUSE Leap 15.4:libswscale5_9-4.4-150400.1.13 openSUSE Tumbleweed:ffmpeg-4-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavcodec-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavdevice-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavfilter-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavformat-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavresample-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libavutil-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libpostproc-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libswresample-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-libswscale-devel-4.4-5.2 openSUSE Tumbleweed:ffmpeg-4-private-devel-4.4-5.2 openSUSE Tumbleweed:libavcodec58_134-4.4-5.2 openSUSE Tumbleweed:libavcodec58_134-32bit-4.4-5.2 openSUSE Tumbleweed:libavdevice58_13-4.4-5.2 openSUSE Tumbleweed:libavdevice58_13-32bit-4.4-5.2 openSUSE Tumbleweed:libavfilter7_110-4.4-5.2 openSUSE Tumbleweed:libavfilter7_110-32bit-4.4-5.2 openSUSE Tumbleweed:libavformat58_76-4.4-5.2 openSUSE Tumbleweed:libavformat58_76-32bit-4.4-5.2 openSUSE Tumbleweed:libavresample4_0-4.4-5.2 openSUSE Tumbleweed:libavresample4_0-32bit-4.4-5.2 openSUSE Tumbleweed:libavutil56_70-4.4-5.2 openSUSE Tumbleweed:libavutil56_70-32bit-4.4-5.2 openSUSE Tumbleweed:libpostproc55_9-4.4-5.2 openSUSE Tumbleweed:libpostproc55_9-32bit-4.4-5.2 openSUSE Tumbleweed:libswresample3_9-4.4-5.2 openSUSE Tumbleweed:libswresample3_9-32bit-4.4-5.2 openSUSE Tumbleweed:libswscale5_9-4.4-5.2 openSUSE Tumbleweed:libswscale5_9-32bit-4.4-5.2 moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H