9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.004 Low
EPSS
Percentile
72.2%
Debian Security Advisory DSA-2855-1 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
February 05, 2014 http://www.debian.org/security/faq
Package : libav
Vulnerability : several
Problem type : local
Debian-specific: no
CVE ID : CVE-2011-3944 CVE-2013-0845 CVE-2013-0846 CVE-2013-0849
CVE-2013-0865 CVE-2013-7010 CVE-2013-7014 CVE-2013-7015
Several security issues have been corrected in multiple demuxers and
decoders of the libav multimedia library. The IDs mentioned above are just
a portion of the security issues fixed in this update. A full list of the
changes is available at
http://git.libav.org/?p=libav.git;a=blob;f=Changelog;hb=refs/tags/v0.8.10
For the stable distribution (wheezy), these problems have been fixed in
version 6:0.8.9-1.
For the unstable distribution (sid), these problems have been fixed in
version 6:9.11-1.
We recommend that you upgrade your libav packages.
Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/
Mailing list: [email protected]
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 7 | all | libav | <Â 6:0.8.10-1 | libav_6:0.8.10-1_all.deb |