ID de Prueba:	1.3.6.1.4.1.25623.1.1.10.2025.0067
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2025-0067)
Resumen:	The remote host is missing an update for the 'ffmpeg' package(s) announced via the MGASA-2025-0067 advisory.
Descripción:	Summary: The remote host is missing an update for the 'ffmpeg' package(s) announced via the MGASA-2025-0067 advisory. Vulnerability Insight: A buffer overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the ff_bwdif_filter_intra_c function in the libavfilter/bwdifdsp.c:125:5 component. (CVE-2023-49502) FFmpeg version n6.1.1 was discovered to contain a heap use-after-free via the av_hwframe_ctx_init function. (CVE-2024-31578) Affected Software/OS: 'ffmpeg' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2023-49502 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/ https://github.com/FFmpeg/FFmpeg https://trac.ffmpeg.org/ticket/10688 Common Vulnerability Exposure (CVE) ID: CVE-2024-31578 https://gist.github.com/1047524396/45400cce5859d78dcd3a62010df8d179 https://github.com/ffmpeg/ffmpeg/commit/3bb00c0a420c3ce83c6fafee30270d69622ccad7
Copyright	Copyright (C) 2025 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.