DeutschShown in its original language — a full translation is planned for a future version.
ffmpeg: Mehrere Schwachstellen
view advisory published 2024-12-29
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in ffmpeg ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen und Daten zu manipulieren.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-6605US | — | — | ||
A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH play… | ||||
| CVE-2023-6604US | — | — | ||
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via t… | ||||
| CVE-2023-6603US | high7.5 | — | ||
A flaw was found in FFmpeg's HLS playlist parsing. This vulnerability allows a denial of service via a maliciously crafted HLS playlist that triggers a null pointer dereference dur… | ||||
| CVE-2023-6602US | — | — | ||
A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via improper parsing of non-TTY-compliant input files in HLS playlists. | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Bugtracker #2334335 vom 2024-12-29external
- Red Hat Bugtracker #2334336 vom 2024-12-29external
- Red Hat Bugtracker #2334337 vom 2024-12-29external
- Red Hat Bugtracker #2334338 vom 2024-12-29external
- Debian Security Advisory DLA-4241 vom 2025-07-14external
- Debian Security Advisory DLA-4440 vom 2026-01-17external
- openSUSE Security Update OPENSUSE-SU-2026:11665-1 vom 2026-09-04external
- openSUSE Security Update OPENSUSE-SU-2026:12064-1 vom 2026-10-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan