CVE-2018-9841

Publication date 7 April 2018

Last updated 25 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

8.8 · High

Score breakdown

Description

The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of service (out-of-array access) or possibly have unspecified other impact via a long filename.

Status

Package Ubuntu Release Status
ffmpeg 18.10 cosmic
Not affected
18.04 LTS bionic
Fixed 7:3.4.4-0ubuntu0.18.04.1
17.10 artful Ignored end of life
16.04 LTS xenial
Not affected
14.04 LTS trusty Not in release
libav 18.10 cosmic Not in release
18.04 LTS bionic Not in release
17.10 artful Not in release
16.04 LTS xenial Not in release
14.04 LTS trusty
Not affected

Severity score breakdown

CVSS version: CVSS v3.0

Base score 8.8 · High

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

Other references

Access our resources on patching vulnerabilities