Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-6601

Опубликовано: 06 янв. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 4.7

Описание

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

РелизСтатусПримечание
devel

deferred

2025-06-02
esm-apps-legacy/xenial

deferred

2025-06-02
esm-apps/bionic

deferred

2025-06-02
esm-apps/focal

deferred

2025-06-02
esm-apps/jammy

deferred

2025-06-02
esm-apps/noble

deferred

2025-06-02
esm-apps/resolute

deferred

2025-06-02
esm-apps/xenial

ignored

end of ESM support, was deferred [2025-06-02]
focal

ignored

end of standard support, was deferred [2025-06-02]
jammy

deferred

2025-06-02

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

resolute

DNE

Показывать по

EPSS

Процентиль: 34%
0.00405
Низкий

4.7 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.7
nvd
больше 1 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

CVSS3: 4.7
debian
больше 1 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows by ...

CVSS3: 4.7
github
больше 1 года назад

A flaw was found in FFmpeg's HLS demuxer. This vulnerability allows bypassing unsafe file extension checks and triggering arbitrary demuxers via base64-encoded data URIs appended with specific file extensions.

CVSS3: 4.7
fstec
больше 2 лет назад

Уязвимость мультимедийной библиотеки FFmpeg, связанная с неправильным контролем идентификаторов ресурсов, позволяющая нарушителю получить доступ к конфиденциальным данным

suse-cvrf
7 месяцев назад

Security update for ffmpeg-4

EPSS

Процентиль: 34%
0.00405
Низкий

4.7 Medium

CVSS3

Уязвимость CVE-2023-6601