Unrated
Ffmpeg: hls xbin demuxer dos amplification in ffmpeg
CVE-2023-6604
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-6604 ffmpeg Fixed in: 7:4.3.9-0+deb11u1
- Ubuntu UBUNTU-CVE-2023-6604 libav
Original description The description as published by the source.
A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage consumption, potentially leading to degraded performance or denial of service via the demuxing of arbitrary data as XBIN-formatted data without proper format validation.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report bugzilla.redhat.com
- web lists.debian.org