vulnerability

Ubuntu: USN-7830-1 (CVE-2023-6605): FFmpeg vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:N/C:P/I:P/A:N)	Jan 6, 2025	Jun 26, 2025	Oct 23, 2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

Jan 6, 2025

Added

Jun 26, 2025

Modified

Oct 23, 2025

Description

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.

Solutions

ubuntu-pro-upgrade-ffmpegubuntu-pro-upgrade-libavcodec57ubuntu-pro-upgrade-libavcodec58ubuntu-pro-upgrade-libavcodec60ubuntu-pro-upgrade-libavformat57ubuntu-pro-upgrade-libavformat58ubuntu-pro-upgrade-libavformat60

References

CVE-2023-6605
https://attackerkb.com/topics/CVE-2023-6605
CWE-99
UBUNTU-USN-7830-1
URL-https://bugzilla.redhat.com/show_bug.cgi?id=2334336
URL-https://ubuntu.com/security/notices/USN-7830-1
URL-https://www.cve.org/CVERecord?id=CVE-2023-6605

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today