There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before
    3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving
    sample size. (CVE-2016-6164)

  - The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote
    attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data.
    (CVE-2016-2213)

  - libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows
    remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have
    unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and
    bayer_to_yv12_wrapper functions. (CVE-2016-2328)

  - libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr
    chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds
    array access) or possibly have unspecified other impact via a crafted TIFF file, related to the
    tiff_decode_tag and decode_frame functions. (CVE-2016-2329)

  - libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote
    attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other
    impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and
    gif_encode_close functions. (CVE-2016-2330)

远程主机受到 GLSA-201606-09 中所述漏洞的影响（FFmpeg：多个漏洞）

    已在 FFmpeg 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    远程攻击者可能执行任意代码或造成拒绝服务。
  变通方案：

    目前无任何已知的变通方案。

此 ffmpeg 2.8.6 更新可修正下列問題：

- CVE-2016-2329：透過特製 TIFF 檔案觸發的遠端 DoS (boo#966674)

VLC 已更新至 2.8.6，內含多種其他上游錯誤修正。

此 ffmpeg 2.8.6 更新修复了以下问题：

- CVE-2016-2329：通过构建的 TIFF 文件造成的远程 DoS (boo#966674)

VLC 已更新到 2.8.6，包含多种其他上游缺陷补丁。

遠端主機受到 GLSA-201606-09 中所述的弱點影響 (FFmpeg：多個弱點)

    在 FFmpeg 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    遠端攻擊者可能會執行任意程式碼，或引發拒絕服務情況。
  因應措施：

    目前尚無已知的因應措施。

ffmpeg 2.8.6 へのこの更新により、以下の問題が修正されます：

- CVE-2016-2329：細工された　TIFF ファイルによるリモート DoS（boo#966674）

さまざまな他の Upstream のバグ修正を含む 2.8.6 へ、VLC が更新されました。

リモートホストは、GLSA-201606-09 で説明されている脆弱性の影響を受けます（FFmpeg：複数の脆弱性）

FFmpeg に複数の脆弱性が発見されました。詳細については、以下で参照されている CVE 識別子をレビューしてください。
 影響：

リモートの攻撃者が、任意のコードを実行すること、またはサービス拒否状態を引き起こすことが可能です。
 回避策：

現時点で、既知の回避策はありません。

The remote host is affected by the vulnerability described in GLSA-201606-09 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update to ffmpeg 2.8.6 fixes the following issues :

  - CVE-2016-2329: Remote DoS via crafted TIFF files     (boo#966674)

VLC was updated to 2.8.6, containing various other upstream bugfixes.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
91703	GLSA-201606-09 : FFmpeg：多个漏洞	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	high
88921	openSUSE 安全性更新：ffmpeg (openSUSE-2016-246)	Nessus	SuSE Local Security Checks	2016/2/24	2021/1/19	high
88921	openSUSE 安全更新：ffmpeg (openSUSE-2016-246)	Nessus	SuSE Local Security Checks	2016/2/24	2021/1/19	high
91703	GLSA-201606-09：FFmpeg：多個弱點	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	high
88921	openSUSE セキュリティ更新：ffmpeg（openSUSE-2016-246）	Nessus	SuSE Local Security Checks	2016/2/24	2021/1/19	high
91703	GLSA-201606-09：FFmpeg：複数の脆弱性	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	high
91703	GLSA-201606-09 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2016/6/20	2021/1/11	high
88921	openSUSE Security Update : ffmpeg (openSUSE-2016-246)	Nessus	SuSE Local Security Checks	2016/2/24	2021/1/19	high

检测

插件搜索

critical

critical

high

high

high

high

high

high

high

high