summaryrefslogtreecommitdiffstats
path: root/data
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2023-10-28 11:44:42 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2023-10-28 11:44:42 +0200
commit4e19bf79e6b03cf034b0ff5224b34716c6bb58e7 (patch)
tree926955286d834feadf3e0e6aeb5a99be91dc7b90 /data
parent7a16c93f579eb4c6a40f964664e8aaa1f76e0d52 (diff)
Add CVE-2023-46407/ffmpeg
Diffstat (limited to 'data')
-rw-r--r--data/CVE/list7
1 files changed, 6 insertions, 1 deletions
diff --git a/data/CVE/list b/data/CVE/list
index 1c70daec27..e7fb44460c 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -111,7 +111,12 @@ CVE-2023-46852 (In Memcached before 1.6.22, a buffer overflow exists when proces
CVE-2023-46604 (Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerabili ...)
TODO: check
CVE-2023-46407 (FFmpeg prior to commit bf814 was discovered to contain an out of bound ...)
- TODO: check
+ - ffmpeg <unfixed>
+ NOTE: Introduced by: https://github.com/FFmpeg/FFmpeg/commit/f7ac3512f5b5cb8eb149f37300b43461d8e93af3
+ NOTE: Fixed by: https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962
+ NOTE: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/
+ NOTE: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/
+ TODO: check details for released versions
CVE-2023-46394 (A stored cross-site scripting (XSS) vulnerability in /home/user/edit_s ...)
NOT-FOR-US: gougucms
CVE-2023-46393 (gougucms v4.08.18 was discovered to contain a password reset poisoning ...)

© 2014-2024 Faster IT GmbH | imprint | privacy policy