Lucene search
+L

CVE-2016-1897

🗓️ 14 Jan 2016 00:00:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve
🔗 ubuntu.com👁 40 Views

FFmpeg 2.x allows remote attackers to conduct cross-origin attacks via concat protocol in HLS M3U8 file, leading to arbitrary file read. Fixed in DSA-3506-1 by disabling protocol concat

Related
Packages
Refs
ReporterTitlePublishedViews
Family
archlinux
ArchLinux
ffmpeg: information leakage
17 Jan 201600:00
–archlinux
bdu_fstec
BDU FSTEC
FFmpeg Arbitrary File Read
24 Feb 201600:00
–bdu_fstec
cnvd
CNVD
FFmpeg and Libav Information Disclosure Vulnerability
16 Jan 201600:00
–cnvd
cve
CVE
CVE-2016-1897
15 Jan 201602:00
–cve
cvelist
Cvelist
CVE-2016-1897
15 Jan 201602:00
–cvelist
debian
Debian
[SECURITY] [DSA 3506-1] libav security update
4 Mar 201620:44
–debian
debiancve
Debian CVE
CVE-2016-1897
15 Jan 201602:00
–debiancve
nessus
Tenable Nessus
Debian DSA-3506-1 : libav - security update
7 Mar 201600:00
–nessus
nessus
Tenable Nessus
FreeBSD : ffmpeg -- remote attacker can access local files (046fedd1-bd01-11e5-bbf4-5404a68ad561)
19 Jan 201600:00
–nessus
nessus
Tenable Nessus
GLSA-201606-09 : FFmpeg: Multiple vulnerabilities
20 Jun 201600:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu17.10allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu18.04allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu18.10allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu19.04allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu15.10allffmpeg7:2.7.5-0ubuntu0.15.10.1ffmpeg_7:2.7.5-0ubuntu0.15.10.1_all.deb
Ubuntu16.04allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu16.10allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu17.04allffmpeg7:2.8.6-1ubuntu1ffmpeg_7:2.8.6-1ubuntu1_all.deb
Ubuntu12.04alllibav4:0.8.17-0ubuntu0.12.04.2libav_4:0.8.17-0ubuntu0.12.04.2_all.deb
Ubuntu14.04alllibav6:9.20-0ubuntu0.14.04.1+esm1libav_6:9.20-0ubuntu0.14.04.1+esm1_all.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

25 Aug 2025 21:55Current
6.5Medium risk
Vulners AI Score6.5
CVSS 24.3
CVSS 35.5
EPSS0.14621
40