Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2944-1
HistoryApr 04, 2016 - 12:00 a.m.

Libav vulnerabilities

2016-04-0400:00:00
ubuntu.com
66

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.025

Percentile

90.2%

JSON

Releases

  • Ubuntu 12.04

Packages

  • libav - Multimedia player, server, encoder and transcoder

Details

It was discovered that Libav incorrectly handled certain malformed media
files. If a user were tricked into opening a crafted media file, an
attacker could cause a denial of service via application crash, or possibly
execute arbitrary code with the privileges of the user invoking the
program.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchlibavformat53<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchffmpeg-dbg<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibav-dbg<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibav-tools<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibav-tools-dbgsym<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibavcodec-dev<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibavcodec53<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibavcodec53-dbgsym<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibavdevice-dev<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Ubuntu12.04noarchlibavdevice53<Β 4:0.8.17-0ubuntu0.12.04.2UNKNOWN
Rows per page:
1-10 of 251

Related

nessus 23
openvas 20
osv 11
debian 8
gentoo 3
hackerone 1
slackware 1
suse 1
freebsd 7
f5 2
cert 1
seebug 1
archlinux 1
mageia 6
nvd 14
veracode 11
debiancve 14
cve 14
ubuntucve 14
prion 14
cvelist 14
alpinelinux 1
securityvulns 2
nessus
nessus
Ubuntu 12.04 LTS : libav vulnerabilities (USN-2944-1)
2016-04-05 00:00:00
Debian DSA-3506-1 : libav - security update
2016-03-07 00:00:00
GLSA-201705-08 : libav: Multiple vulnerabilities
2017-05-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2944-1)
2016-04-05 00:00:00
Debian Security Advisory DSA 3506-1 (libav - security update)
2016-03-04 00:00:00
Debian: Security Advisory (DSA-3506-1)
2016-03-03 00:00:00
osv
osv
libav - security update
2016-03-04 00:00:00
libav - security update
2016-10-04 00:00:00
CVE-2016-2330
2016-02-12 05:59:00
debian
debian
[SECURITY] [DSA 3506-1] libav security update
2016-03-04 20:44:32
[SECURITY] [DLA 644-1] libav security update
2016-10-04 22:18:43
[SECURITY] [DLA 1611-1] libav security update
2018-12-20 21:51:33
gentoo
gentoo
libav: Multiple vulnerabilities
2017-05-09 00:00:00
FFmpeg: Multiple vulnerabilities
2016-06-18 00:00:00
FFmpeg: Multiple vulnerabilities
2016-03-12 00:00:00
hackerone
hackerone
Pornhub: [ssrf] libav vulnerable during conversion of uploaded videos
2016-01-17 15:36:02
slackware
slackware
[slackware-security] MPlayer
2016-02-04 00:05:34
suse
suse
Security update for ffmpeg (important)
2016-01-25 22:11:11
freebsd
freebsd
ffmpeg -- remote attacker can access local files
2016-01-13 00:00:00
ffmpeg -- multiple vulnerabilities
2015-09-05 00:00:00
libav -- divide by zero
2015-06-21 00:00:00
f5
f5
K03202240 : FFmpeg vulnerabilities CVE-2016-1897 and CVE-2016-1898
2016-02-08 00:00:00
SOL03202240 - FFmpeg vulnerabilities CVE-2016-1897 and CVE-2016-1898
2016-02-08 00:00:00
cert
cert
ffmpeg and Libav cross-domain information disclosure vulnerability
2016-01-20 00:00:00
seebug
seebug
FFmpeg 2.xη‰ˆζœ¬ζœεŠ‘ε™¨η«―θ―·ζ±‚δΌͺι€ ζΌζ΄ž
2016-05-06 00:00:00
archlinux
archlinux
ffmpeg: information leakage
2016-01-17 00:00:00
mageia
mageia
Updated ffmpeg packages fix security vulnerabilities
2016-01-15 04:52:38
Updated ffmpeg packages fix security vulnerabilities
2016-02-09 22:05:34
Updated ffmpeg package fixes security vulnerability
2015-06-19 16:33:05
nvd
nvd
CVE-2015-8364
2015-11-26 17:59:01
CVE-2015-6826
2015-09-06 02:59:09
CVE-2015-6818
2015-09-06 02:59:00
veracode
veracode
Denial Of Service (DoS)
2017-02-07 01:26:42
Denial Of Service (DoS)
2017-02-07 02:50:05
Denial Of Service (DoS)
2017-02-09 02:06:02
debiancve
debiancve
CVE-2015-6826
2015-09-06 02:59:09
CVE-2015-8364
2015-11-26 17:59:01
CVE-2015-6818
2015-09-06 02:59:00
cve
cve
CVE-2015-6818
2015-09-06 02:59:00
CVE-2015-8364
2015-11-26 17:59:01
CVE-2015-6826
2015-09-06 02:59:09
ubuntucve
ubuntucve
CVE-2015-8364
2015-11-26 00:00:00
CVE-2015-6826
2015-09-05 00:00:00
CVE-2014-8541
2014-11-05 00:00:00
prion
prion
Integer overflow
2015-11-26 17:59:00
Design/Logic Flaw
2015-09-06 02:59:00
Out-of-bounds
2015-09-06 02:59:00
cvelist
cvelist
CVE-2015-8364
2015-11-26 17:00:00
CVE-2015-6826
2015-09-06 01:00:00
CVE-2015-6818
2015-09-06 01:00:00
alpinelinux
alpinelinux
CVE-2016-2330
2016-02-12 05:59:04
securityvulns
securityvulns
libav / ffmpeg security vulnerabilities
2015-06-21 00:00:00
[SECURITY] [DSA 3288-1] libav security update
2015-06-21 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.025

Percentile

90.2%

JSON
Related for USN-2944-1
nessus23openvas20osv11debian8gentoo3hackerone1slackware1suse1freebsd7f52cert1seebug1archlinux1mageia6nvd14veracode11debiancve14cve14ubuntucve14prion14cvelist14alpinelinux1securityvulns2