Debian/ffmpeg: high 7.5
FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attack
Action: Upgrade ffmpeg to 7:3.2.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7:3.2.6-1 | - |
Fixed versions
| 7:3.2.6-1 |
Sources
- osv: DEBIAN-CVE-2017-9993#Debian:13/ffmpeg
- https://security-tracker.debian.org/tracker/CVE-2017-9993
published · modified · JSON