There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before
    2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote
    attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a
    crafted file. (CVE-2017-9991)

  - Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x
    before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to
    cause a denial of service (application crash) or possibly have unspecified other impact via a crafted
    file. (CVE-2017-9992)

  - libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and
    3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of
    service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a
    crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. (CVE-2017-9994)

  - The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8,
    3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which
    allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or
    possibly have unspecified other impact via a crafted file. (CVE-2017-9996)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 FFmpeg 之前的 2.8.x2.8.12] 之前的  、 3.0.x 之前的 3.0.8、 3.1.x 之前的 3.1.8、 [] 之前的 3.2.53.2.x 以及 3.3.x 之前的 3.3.1 中libavcodec/cdxl.c 的 cdxl_decode_frame 函式未排除 CHUNKY 格式其允許遠端攻擊者透過特製檔案造成拒絕服務 (堆積型緩衝區溢位和應用程式損毀)或可能造成其他不明影響。 (CVE-2017-9996)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 之前的 2.8.x2.8.12和 之前的 3.0.x 、 之前的 3.0.8、 之前的 3.1.83.1.x 、之前的 3.2.x3.2.5以及 之前的 的 3.3.13.3.x 中libavcodec/cdxl.c 的 cdxl_decode_frame 函数不排除 CHUNKY 格式允许远程攻击者通过特制的文件造成拒绝服务基于堆的缓冲区溢出和应用程序崩溃或可能造成其他不明影响。 (CVE-2017-9996)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - FFmpeg 2.8.x より前の 2.8.12、 3.0.x より前の 3.0.8、 3.1.x より前の 3.1.8、[] より前の 3.2.5]、 3.2.x3.3.x より前の 3.3.1 の libavcodec/cdxl.c の cdxl_decode_frame 関数が、CHUNKY フォーマットを除外しません。により、リモートの攻撃者がサービス拒否 (ヒープベースのバッファオーバーフローやアプリケーションのクラッシュ) を引き起こしたり、細工された ファイルを介して詳細不明な他の影響を与えたりする可能性があります。CVE-2017-9996

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8,     3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which     allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or     possibly have unspecified other impact via a crafted file. (CVE-2017-9996)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
255001	Linux Distros 未修補的弱點：CVE-2017-9996	Nessus	Misc.	8/25/2025	8/25/2025	high
255001	Linux Distros 未修补的漏洞：CVE-2017-9996	Nessus	Misc.	8/25/2025	8/25/2025	high
255001	Linux Distros のパッチ未適用の脆弱性: CVE-2017-9996	Nessus	Misc.	8/25/2025	8/25/2025	high
255001	Linux Distros Unpatched Vulnerability : CVE-2017-9996	Nessus	Misc.	8/25/2025	8/25/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high