Lucene search
Arch LinuxASA-201601-17HistoryJan 17, 2016 - 12:00 a.m.
ffmpeg: information leakage
2016-01-1700:00:00
Arch Linux
lists.archlinux.org
22
0.005 Low
EPSS
Percentile
77.2%
A vulnerability in the way FFmpeg handles the concat (CVE-2016-1897) and
subfile (CVE-2016-1898) protocols in a HTTP Live Streaming (HLS) M3U8
file allows a remote attacker to conduct a cross-origin attacks, and to
access arbitrary local files on the vulnerable host. The attack uses a
crafted M3U8 file to make FFmpeg send a HTTP request to an external
server, with the URL containing data from arbitrary local files.
Related
freebsd
freebsd
ffmpeg -- remote attacker can access local files
2016-01-13 00:00:00
seebug
seebug
FFmpeg 2.xηζ¬ζε‘ε¨η«―θ―·ζ±δΌͺι ζΌζ΄
2016-05-06 00:00:00
nessus
nessus
suse
suse
Security update for ffmpeg (important)
2016-01-25 22:11:11
hackerone
hackerone
Pornhub: [ssrf] libav vulnerable during conversion of uploaded videos
2016-01-17 15:36:02
slackware
slackware
[slackware-security] MPlayer
2016-02-04 00:05:34
cert
cert
ffmpeg and Libav cross-domain information disclosure vulnerability
2016-01-20 00:00:00
f5
f5
SOL03202240 - FFmpeg vulnerabilities CVE-2016-1897 and CVE-2016-1898
2016-02-08 00:00:00
K03202240 : FFmpeg vulnerabilities CVE-2016-1897 and CVE-2016-1898
2016-02-08 00:00:00
openvas
openvas
openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2016:0243-1)
2016-02-02 00:00:00
Slackware: Security Advisory (SSA:2016-034-02)
2022-04-21 00:00:00
Mageia: Security Advisory (MGASA-2016-0060)
2016-02-11 00:00:00
debian
debian
[SECURITY] [DSA 3506-1] libav security update
2016-03-04 20:44:32
osv
osv
libav - security update
2016-03-04 00:00:00
mageia
mageia
Updated ffmpeg packages fix security vulnerabilities
2016-02-09 22:05:34
ubuntucve
ubuntucve
CVE-2016-1898
2016-01-14 00:00:00
CVE-2016-1897
2016-01-14 00:00:00
nvd
nvd
CVE-2016-1898
2016-01-15 03:59:23
CVE-2016-1897
2016-01-15 03:59:23
cvelist
cvelist
CVE-2016-1898
2016-01-15 02:00:00
CVE-2016-1897
2016-01-15 02:00:00
cve
cve
CVE-2016-1898
2016-01-15 03:59:23
CVE-2016-1897
2016-01-15 03:59:23
debiancve
debiancve
CVE-2016-1898
2016-01-15 03:59:23
CVE-2016-1897
2016-01-15 03:59:23
gentoo
gentoo
libav: Multiple vulnerabilities
2017-05-09 00:00:00
FFmpeg: Multiple vulnerabilities
2016-06-18 00:00:00
ubuntu
ubuntu
Libav vulnerabilities
2016-04-04 00:00:00