CVE-2019-11338

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2020-01/msg00012.html · Mailing List
• securityfocus.com/bid/108034 · Broken Link
• FFmpeg/FFmpeg commit 5465562 · Patch
• FFmpeg/FFmpeg commit 9ccc633 · Patch
• lists.debian.org/debian-lts-announce/2019/05/msg00043.html · Mailing List
• seclists.org/bugtraq/2019/May/60 · Mailing List
• usn.ubuntu.com/3967-1 · Third Party Advisory
• usn.ubuntu.com/4431-1 · Third Party Advisory
• debian.org/security/2019/dsa-4449 · Third Party Advisory

ffmpeg のその他の脆弱性

• CVE-2026-107698中 5.4FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c t…
• CVE-2026-107697中 4.3FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensio…
• CVE-2026-107696中 6.5FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects with…
• CVE-2026-107695中 6.5FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service becau…
• CVE-2026-107678中 4.7FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recur…