There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before
    3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving
    sample size. (CVE-2016-6164)

  - An off by one error resulting in an allocation of zero size in FFmpeg in Google Chrome prior to
    54.0.2840.98 for Mac, and 54.0.2840.99 for Windows, and 54.0.2840.100 for Linux, and 55.0.2883.84 for
    Android allowed a remote attacker to potentially exploit heap corruption via a crafted video file.
    (CVE-2016-5199)

  - The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause
    an infinite loop denial of service via a crafted SWF file. (CVE-2016-6881)

  - The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop
    when it decodes an AVI file that has a crafted 'nctg' structure. (CVE-2016-7122)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before
    3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving
    sample size. (CVE-2016-6164)

  - The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote
    attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data.
    (CVE-2016-2213)

  - libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows
    remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have
    unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and
    bayer_to_yv12_wrapper functions. (CVE-2016-2328)

  - libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr
    chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds
    array access) or possibly have unspecified other impact via a crafted TIFF file, related to the
    tiff_decode_tag and decode_frame functions. (CVE-2016-2329)

  - libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote
    attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other
    impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and
    gif_encode_close functions. (CVE-2016-2330)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before
    3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving
    sample size. (CVE-2016-6164)

  - The zlib_refill function in libavformat/swfdec.c in FFmpeg before 3.1.3 allows remote attackers to cause
    an infinite loop denial of service via a crafted SWF file. (CVE-2016-6881)

  - The avi_read_nikon function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to infinite loop
    when it decodes an AVI file that has a crafted 'nctg' structure. (CVE-2016-7122)

  - The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-
    of-bounds memory when it decodes a malformed AIFF file. (CVE-2016-7450)

远程主机受到 GLSA-201701-71 中所述漏洞的影响（FFmpeg：多个漏洞）在 FFmpeg 中发现多个漏洞。请检查下面引用的 CVE 标识符以了解详细信息。影响：远程攻击者可通过多种特制媒体文件类型造成拒绝服务情况或造成其他不明影响。解决方法：目前无任何已知的解决方法。

遠端主機受到 GLSA-201701-71 中所述的弱點影響 (FFmpeg：多個弱點) 在 FFmpeg 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。影響：遠端攻擊者可透過多種特製媒體檔案類型造成拒絕服務情況或造成其他不明影響。因應措施：目前尚無已知的因應措施。

このffmpegの更新では、ffmpegの複数のセキュリティ問題が修正されます（boo#1003806）

これらの脆弱性は、特別に細工されたavi動画コンテンツの処理時に発生する可能性があります。これにより、クラッシュを引き起こしたり、潜在的なコード実行などの詳細不明な影響を与える可能性があります。

  - CVE-2016-7562：特別に細工されたaviファイルによる領域外配列書き込みの障害

  - CVE-2016-7502：不適切なブロック値による領域外配列書き込み

  - CVE-2016-7905：細工された「gab2」構造体が含まれているaviファイルをデコードする際のnull-point-exception

  - CVE-2016-7555：細工された「strh」構造体が含まれているaviファイルをデコードする際のメモリリーク

  - CVE-2016-7785：細工された「strh」構造体が含まれているaviファイルを介したアサート障害

リモートホストが、GLSA-201701-71（FFmpeg：複数の脆弱性）で説明されている脆弱性に影響されています。複数の脆弱性がFFmpegで見つかっています。詳細については、以下に記載されているCVE識別番号を参照してください。影響：リモートの攻撃者が、さまざまな特別に細工されたメディアファイルを介してサービス拒否状態を引き起こしたり、他の不特定の影響を及ぼしたりする可能性があります。回避策：現時点では、既知の回避策はありません。

This update for ffmpeg fixes multiple security issues in ffmpeg (boo#1003806)

These vulnerabilities can be triggered when processing specially crafted avi video content, and could lead to crashes or have unspecified further impact including potential code execution.

  - CVE-2016-7562: out-of-bounds array write fault via     specially crafted avi files

  - CVE-2016-7502: out-of-bounds array write via incorrect     block values

  - CVE-2016-7905: null-point-exception when decoding avi     files with crafted 'gab2' structs

  - CVE-2016-7555: memory leak when decoding avi files with     crafted 'strh' struct

  - CVE-2016-7785: assert fault via avi files with crafted     'strh' struct

The remote host is affected by the vulnerability described in GLSA-201701-71 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    Remote attackers could cause a Denial of Service condition via various       crafted media file types or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
404290	Alpine: multiple ffmpeg packages: security update to 3.0.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
404290	Alpine: multiple ffmpeg packages: security update to 3.0.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
400952	Alpine: ffmpeg2.8: security update to 2.8.7-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
400952	Alpine: ffmpeg2.8: security update to 2.8.7-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
96857	GLSA-201701-71：FFmpeg：多个漏洞	Nessus	Gentoo Local Security Checks	2017/1/30	2026/1/2	high
96857	GLSA-201701-71：FFmpeg：多個弱點	Nessus	Gentoo Local Security Checks	2017/1/30	2026/1/2	high
94129	openSUSEセキュリティ更新プログラム：ffmpeg（openSUSE-2016-1203）	Nessus	SuSE Local Security Checks	2016/10/19	2026/1/21	high
96857	GLSA-201701-71：FFmpeg：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/1/30	2026/1/2	high
94129	openSUSE Security Update : ffmpeg (openSUSE-2016-1203)	Nessus	SuSE Local Security Checks	2016/10/19	2026/1/21	high
96857	GLSA-201701-71 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/1/30	2026/1/2	high

检测

插件搜索

critical

critical

critical

critical

critical

critical

high

high

high

high

high

high