Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2017-9993
HistoryJun 28, 2017 - 6:29 a.m.

CVE-2017-9993

2017-06-2806:29:00
Alpine Linux Development Team
security.alpinelinux.org
12

0.005 Low

EPSS

Percentile

75.6%

FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streaming filename extensions and demuxer names, which allows attackers to read arbitrary files via crafted playlist data.

OSVersionArchitecturePackageVersionFilename
Alpine3.4-mainnoarchffmpeg< 3.1.9-r0UNKNOWN
Alpine3.5-mainnoarchffmpeg< 3.1.9-r0UNKNOWN
Alpine3.6-mainnoarchffmpeg< 3.2.6-r0UNKNOWN

0.005 Low

EPSS

Percentile

75.6%