CVE-2023-51796: Buffer Overflow
Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/freverse.c:269:26 in areverserequestframe.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/ffmpegto a version that resolves this vulnerability.Fixed in 7:6.0-6ubuntu1.1 - Upgrade
Upgrade
debian/ffmpegto a version that resolves this vulnerability.Fixed in 7:4.3.6-0+deb11u1Fixed in 7:4.3.7-0+deb11u1Fixed in 7:5.1.5-0+deb12u1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51796?
CVE-2023-51796 has a high severity rating due to its potential to allow arbitrary code execution.
How do I fix CVE-2023-51796?
To fix CVE-2023-51796, update ffmpeg to version 7:6.0-6ubuntu1.1 for Ubuntu or to one of the specified versions for Debian.
Who is affected by CVE-2023-51796?
CVE-2023-51796 affects users of ffmpeg versions prior to 7:6.1.1-4 and 7:6.1.1-5 on Debian and specified Ubuntu versions.
What components are involved in CVE-2023-51796?
CVE-2023-51796 involves a buffer overflow vulnerability located in libavfilter/f_reverse.c within the ffmpeg library.
Can CVE-2023-51796 be exploited remotely?
CVE-2023-51796 is a local vulnerability, meaning exploitation requires local access to the system.