From 4e19bf79e6b03cf034b0ff5224b34716c6bb58e7 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Sat, 28 Oct 2023 11:44:42 +0200 Subject: Add CVE-2023-46407/ffmpeg --- data/CVE/list | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'data') diff --git a/data/CVE/list b/data/CVE/list index 1c70daec27..e7fb44460c 100644 --- a/data/CVE/list +++ b/data/CVE/list @@ -111,7 +111,12 @@ CVE-2023-46852 (In Memcached before 1.6.22, a buffer overflow exists when proces CVE-2023-46604 (Apache ActiveMQ is vulnerable to Remote Code Execution.The vulnerabili ...) TODO: check CVE-2023-46407 (FFmpeg prior to commit bf814 was discovered to contain an out of bound ...) - TODO: check + - ffmpeg + NOTE: Introduced by: https://github.com/FFmpeg/FFmpeg/commit/f7ac3512f5b5cb8eb149f37300b43461d8e93af3 + NOTE: Fixed by: https://github.com/FFmpeg/FFmpeg/commit/bf814387f42e9b0dea9d75c03db4723c88e7d962 + NOTE: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231015004924.597746-1-leo.izen%40gmail.com/ + NOTE: https://patchwork.ffmpeg.org/project/ffmpeg/patch/20231013014959.536776-1-leo.izen%40gmail.com/ + TODO: check details for released versions CVE-2023-46394 (A stored cross-site scripting (XSS) vulnerability in /home/user/edit_s ...) NOT-FOR-US: gougucms CVE-2023-46393 (gougucms v4.08.18 was discovered to contain a password reset poisoning ...) -- cgit v1.2.3