Ubuntu.comUB:CVE-2023-49501

HistoryApr 19, 2024 - 12:00 a.m.

CVE-2023-49501

2024-04-1900:00:00

ubuntu.com

buffer overflow

ffmpeg

local attacker

arbitrary code

config_eq_output

libavfilter

asrc_afirsrc

vulnerability

execute

component

bug

unix

8.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local
attacker to execute arbitrary code via the config_eq_output function in the
libavfilter/asrc_afirsrc.c:495:30 component.

Bugs

<https://trac.ffmpeg.org/ticket/10686>

OSVersionArchitecturePackageVersionFilename
ubuntu24.04noarchffmpeg< 7:6.1.1-3ubuntu5+esm1UNKNOWN
ubuntu14.04noarchlibav< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	24.04	noarch	ffmpeg	< 7:6.1.1-3ubuntu5+esm1	UNKNOWN
ubuntu	14.04	noarch	libav	< any	UNKNOWN

References

github.com/FFmpeg/FFmpeg

launchpad.net/bugs/cve/CVE-2023-49501

nvd.nist.gov/vuln/detail/CVE-2023-49501

security-tracker.debian.org/tracker/CVE-2023-49501

trac.ffmpeg.org/ticket/10686#no1

ubuntu.com/security/notices/USN-6803-1

www.cve.org/CVERecord?id=CVE-2023-49501