Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-6604

Опубликовано: 06 янв. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.3

Описание

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

РелизСтатусПримечание
devel

deferred

2025-06-02
esm-apps-legacy/xenial

deferred

2025-06-02
esm-apps/bionic

deferred

2025-06-02
esm-apps/focal

deferred

2025-06-02
esm-apps/jammy

deferred

2025-06-02
esm-apps/noble

deferred

2025-06-02
esm-apps/resolute

deferred

2025-06-02
esm-apps/xenial

ignored

end of ESM support, was deferred [2025-06-02]
focal

ignored

end of standard support, was deferred [2025-06-02]
jammy

deferred

2025-06-02

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

needs-triage

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

DNE

resolute

DNE

Показывать по

EPSS

Процентиль: 37%
0.00447
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
nvd
больше 1 года назад

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

CVSS3: 5.3
debian
больше 1 года назад

A flaw was found in FFmpeg. This vulnerability allows unexpected addit ...

CVSS3: 5.3
github
больше 1 года назад

A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.

CVSS3: 5.3
fstec
больше 2 лет назад

Уязвимость мультимедийной библиотеки FFmpeg, связанная с неправильным контролем идентификаторов ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 37%
0.00447
Низкий

5.3 Medium

CVSS3