There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the
    function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The
    manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The
    exploit has been disclosed to the public and may be used. (CVE-2025-1594)

  - A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via
    improper parsing of non-TTY-compliant input files in HLS playlists. (CVE-2023-6602)

  - A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage
    consumption, potentially leading to degraded performance or denial of service via the demuxing of
    arbitrary data as XBIN-formatted data without proper format validation. (CVE-2023-6604)

  - A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests
    to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.
    (CVE-2023-6605)

  - Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary
    code via the config_eq_output function in the libavfilter/asrc_afirsrc.c:495:30 component.
    (CVE-2023-49501)

远程主机上安装的 FFmpeg 版本低于 7.0。因此，该应用程序受到多个漏洞的影响：

  - FFmpeg n6.1-3-g466799d4f5 版本中存在缓冲区溢出漏洞，导致本地攻击者可以通过 de_stereo 组件中的 af_dialoguenhance.c:261:5 执行任意代码并造成拒绝服务 (DoS)。(CVE-2023-49528)

  - FFmpeg 7.0 之前版本中有一个不明漏洞。(CVE-2024-28661)

并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

遠端主機上安裝的 FFmpeg 版本低於 7.0。因此，它受到多個弱點影響：

  - FFmpeg n6.1-3-g466799d4f5 版包含緩衝區溢位弱點，使本機攻擊者可以透過 de_stereo 元件中的 af_dialoguenhance.c:261:5 執行任意程式碼並造成拒絕服務 (DoS)。(CVE-2023-49528)

  - FFmpeg 7.0 之前版本包含不明弱點。(CVE-2024-28661)

Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

リモートホストにインストールされている FFmpeg のバージョンは、7.0 より前です。そのため、以下の複数の脆弱性の影響を受けます。

  - FFmpeg バージョン n6.1-3-g466799d4f5 に存在するバッファオーバーフローの脆弱性により、ローカル攻撃者が任意のコードを実行したり、de_stereo コンポーネントの af_dialoguenhance.c:261:5 を介してサービス拒否 (DoS) を引き起こす可能性があります。(CVE-2023-49528)

  - バージョン 7.0より前の FFmpeg に、詳細不明な脆弱性が存在します。(CVE-2024-28661)

Nessusはこれらの問題のテストを行っておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The version of FFmpeg installed on the remote host is prior to 7.0. It is, therefore, affected by multiple vulnerabilities:

  - Buffer Overflow vulnerability in FFmpeg version n6.1-3-g466799d4f5, allows a local attacker to execute     arbitrary code and cause a denial of service (DoS) via the af_dialoguenhance.c:261:5 in the de_stereo     component. (CVE-2023-49528)

  - An unspecified vulnerability exists in FFmpeg below version 7.0. (CVE-2024-28661)

Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
436215	Alpine: multiple ffmpeg packages: security update to 7.1.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/12/4	2026/7/20	medium
436215	Alpine: multiple ffmpeg packages: security update to 7.1.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/12/4	2026/7/20	medium
193598	FFmpeg < 7.0 多个漏洞	Nessus	Misc.	2024/4/19	2025/6/4	high
193598	FFmpeg < 7.0 多個弱點	Nessus	Misc.	2024/4/19	2025/6/4	high
193598	FFmpeg < 7.0 の複数の脆弱性	Nessus	Misc.	2024/4/19	2025/6/4	high
193598	FFmpeg < 7.0 Multiple Vulnerabilities	Nessus	Misc.	2024/4/19	2025/6/4	high

检测

插件搜索

medium

medium

high

high

high

high