http://git.videolan.org/?p=ffmpeg.git;a=commit;h=47b7c68ae54560e2308bdb6be4fb076c73b93081

103732

GLSA-202003-65

DSA-4249

The remote host is affected by the vulnerability described in GLSA-202003-65 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user or automated system using FFmpeg       to process a specially crafted file, resulting in the execution of       arbitrary code or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed.

ID	Name	Product	Family	Severity
135020	GLSA-202003-65 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
111141	Debian DSA-4249-1 : ffmpeg - security update	Nessus	Debian Local Security Checks	high

CVE-2018-10001

medium

Tenable Plugins

critical

high