CVE-2023-6602

Опубликовано: 31 дек. 2024

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=2334338
Exploit
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2025/07/msg00004.html
https://bugzilla.redhat.com/show_bug.cgi?id=2334338
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ffmpeg:ffmpeg:*:*:*:*:*:*:*:*

Версия от 2.0 (включая) до 6.0 (включая)

EPSS

Процентиль: 58%

0.00367

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-99

NVD-CWE-noinfo

Связанные уязвимости

CVE-2023-6602

CVSS3: 5.3

ubuntu

около 1 года назад

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

CVE-2023-6602

CVSS3: 5.3

debian

около 1 года назад

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows po ...

GHSA-398c-f7w9-crc8

CVSS3: 5.3

github

около 1 года назад

A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists.

EPSS

Процентиль: 58%

0.00367

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-99

NVD-CWE-noinfo