CVE-2023-49501

Опубликовано: 19 апр. 2024

Источник: nvd

CVSS3: 8

EPSS Низкий

Описание

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.

Ссылки

https://github.com/FFmpeg/FFmpeg
Product
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
Third Party Advisory
https://trac.ffmpeg.org/ticket/10686
Exploit
Issue Tracking
https://trac.ffmpeg.org/ticket/10686#no1
Exploit
Issue Tracking
https://github.com/FFmpeg/FFmpeg
Product
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
https://trac.ffmpeg.org/ticket/10686
Exploit
Issue Tracking
https://trac.ffmpeg.org/ticket/10686#no1
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:6.1:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00033

Низкий

8 High

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVE-2023-49501

CVSS3: 8

ubuntu

почти 2 года назад

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.

CVE-2023-49501

CVSS3: 8

debian

почти 2 года назад

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a ...

GHSA-jfff-gxr9-9j6r

CVSS3: 8

github

почти 2 года назад

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.

BDU:2024-05020

CVSS3: 8

fstec

почти 2 года назад

Уязвимость компонента config_eq_output (libavfilter/asrc_afirsrc.c) мультимедийной библиотеки FFmpeg, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 9%

0.00033

Низкий

8 High

CVSS3

Дефекты

CWE-122