CVE-2020-23906

Опубликовано: 10 нояб. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

Ссылки

https://trac.ffmpeg.org/ticket/8782
Exploit
Patch
Vendor Advisory
https://trac.ffmpeg.org/ticket/8782
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:4.2:-:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00078

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-345

Связанные уязвимости

CVE-2020-23906

CVSS3: 5.5

ubuntu

около 4 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

CVE-2020-23906

CVSS3: 5.5

debian

около 4 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of servi ...

GHSA-r6wg-2v54-wv96

github

больше 3 лет назад

FFmpeg N-98388-g76a3ee996b allows attackers to cause a denial of service (DoS) via a crafted audio file due to insufficient verification of data authenticity.

EPSS

Процентиль: 23%

0.00078

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-345