Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2020-23906

Опубликовано: 10 нояб. 2021
Источник: debian
EPSS Низкий

Описание

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
ffmpegfixed7:4.3.1-1package
ffmpegnot-affectedbusterpackage
ffmpegnot-affectedstretchpackage

Примечания

  • Regressed since: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=e045be92cdf5a2851900e8e85b815c29ae6f100a (n4.3)

  • Fixed by: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=ec59dc73f0cc8930bf5dae389cd76d049d537ca7 (n4.4)

  • Fixed by: http://git.videolan.org/?p=ffmpeg.git;a=commitdiff;h=be84216c53a4ed81573c82320e9c4a20e9b349d9 (n4.3.1)

EPSS

Процентиль: 23%
0.00078
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 4 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

CVSS3: 5.5
nvd
около 4 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

github
больше 3 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

EPSS

Процентиль: 23%
0.00078
Низкий