There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before
    2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote
    attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a
    crafted file. (CVE-2017-9991)

  - Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x
    before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote attackers to
    cause a denial of service (application crash) or possibly have unspecified other impact via a crafted
    file. (CVE-2017-9992)

  - libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and
    3.3.x before 3.3.1 does not ensure that pix_fmt is set, which allows remote attackers to cause a denial of
    service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a
    crafted file, related to the vp8_decode_mb_row_no_filter and pred8x8_128_dc_8_c functions. (CVE-2017-9994)

  - The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8,
    3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not exclude the CHUNKY format, which
    allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or
    possibly have unspecified other impact via a crafted file. (CVE-2017-9996)

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 2.8.12之前的 FFmpeg、 3.0.x 之前的 3.0.8、 3.1.x 之前的 3.1.8、 3.2.x 之前的 [] 以及 3.3.x ] 之前的 3.2.53.3.1 中libavcodec/xwddec.c 的 xwd_decode_frame 函数存在基于堆的缓冲区溢出可让远程攻击者通过特制的文件会造成拒绝服务应用程序崩溃或可能有其他不明影响。 (CVE-2017-9991)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 2.8.12之前的 [ 3.0.8之前的 3.0.x 、 [] 之前的 3.1.83.1.x 、 3.2.x ] 之前的 3.2.5] 以及 3.3.x ] 之前的 3.3.1 中libavcodec/xwddec.c 的 xwd_decode_frame 函式有一個堆積型緩衝區溢位問題允許遠端攻擊者會透過特製檔案造成拒絕服務 (應用程式損毀)或可能有其他不明影響。 (CVE-2017-9991)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 2.8.12より前の FFmpeg、 3.0.x より前の 3.2.5、 3.1.x より 3.0.8前の 、 3.2.x より 3.1.8前の 、 3.3.x より 3.3.1 前のサービス拒否アプリケーションクラッシュを引き起こしたり、細工されたファイルを介して詳細不明なその他の影響を与えたりする可能性があります。CVE-2017-9991

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before     2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 allows remote     attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a     crafted file. (CVE-2017-9991)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404295	Alpine: multiple ffmpeg packages: security update to 3.1.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
404298	Alpine: multiple ffmpeg packages: security update to 3.2.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	10/31/2023	7/2/2026	high
258500	Linux Distros 未修补的漏洞：CVE-2017-9991	Nessus	Misc.	8/30/2025	8/30/2025	high
258500	Linux Distros 未修補的弱點：CVE-2017-9991	Nessus	Misc.	8/30/2025	8/30/2025	high
258500	Linux Distros のパッチ未適用の脆弱性: CVE-2017-9991	Nessus	Misc.	8/30/2025	8/30/2025	high
258500	Linux Distros Unpatched Vulnerability : CVE-2017-9991	Nessus	Misc.	8/30/2025	8/30/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high