Medium severity · published Jan 15, 2016
CVE-2016-1897
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an…
5.5
CVSS
14.6%
EPSS
No
On KEV
Description
FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the concat protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains the first line of a local file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)14.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Ffmpeg · Ffmpeg
2.0; 2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; +34 more · source: NVD
LE
Leap · Opensuse
42.1 · source: NVD
UL
Ubuntu Linux · Canonical
12.04 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1897
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1897
Exploit
http://habrahabr.ru/company/mailru/blog/274855
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00034.html
Exploit
http://security.stackexchange.com/questions/110644
www.debian.org
http://www.debian.org/security/2016/dsa-3506
www.openwall.com
http://www.openwall.com/lists/oss-security/2016/01/14/1
www.securityfocus.com
http://www.securityfocus.com/bid/80501
More from Ubuntu Linux
9.8
CVE-2020-11651
SaltStack Salt Authentication Bypass Vulnerability
9.8
CVE-2020-7247
OpenSMTPD Remote Code Execution Vulnerability
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2019-16928
Exim Out-of-bounds Write Vulnerability
9.8
CVE-2019-10149
Exim Mail Transfer Agent (MTA) Improper Input Validation