There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the
    function ff_aac_search_for_tns of the file libavcodec/aacenc_tns.c of the component AAC Encoder. The
    manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The
    exploit has been disclosed to the public and may be used. (CVE-2025-1594)

  - A flaw was found in FFmpeg's TTY Demuxer. This vulnerability allows possible data exfiltration via
    improper parsing of non-TTY-compliant input files in HLS playlists. (CVE-2023-6602)

  - A flaw was found in FFmpeg. This vulnerability allows unexpected additional CPU load and storage
    consumption, potentially leading to degraded performance or denial of service via the demuxing of
    arbitrary data as XBIN-formatted data without proper format validation. (CVE-2023-6604)

  - A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests
    to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.
    (CVE-2023-6605)

  - Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within
    an Executable. This vulnerability is associated with program files
    https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C . This issue affects FFmpeg: 7.1. Issue
    was fixed: https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a
    https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered
    by: Simcha Kosman (CVE-2025-0518)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - commit 4bf784c 之前的 FFmpeg 中存在一個堆積緩衝區溢位弱點允許攻擊者在處理圖標 grid 群組資料流時透過以 avformat 提供特製媒體檔案的方式觸發記憶體損毀。這可導致拒絕服務 (DoS)。 (CVE-2025-22920)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 commit 4bf784c 之前的 FFmpeg 中存在堆缓冲区溢出漏洞允许攻击者在处理切片网格群组流时通过提供 avformat 的特制媒体文件来触发内存损坏。这可能导致拒绝服务 (DoS)。 (CVE-2025-22920)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - コミット 4bf784c より前の FFmpeg のヒープバッファオーバーフローの脆弱性により、攻撃者が、タイルグリッドグループストリームを処理する際に avformat の細工されたメディアファイルを供給することでメモリ破損を引き起こす可能性があります。これは、サービス拒否DoSにつながる可能性があります。CVE-2025-22920

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory     corruption via supplying a crafted media file in avformat when processing tile grid group streams. This     can lead to a Denial of Service (DoS). (CVE-2025-22920)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
436230	Alpine: multiple ffmpeg packages: security update to 8.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/12/4	2026/7/20	high
436230	Alpine: multiple ffmpeg packages: security update to 8.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/12/4	2026/7/20	high
258999	Linux Distros 未修補的弱點：CVE-2025-22920	Nessus	Misc.	2025/8/30	2026/9/2	medium
258999	Linux Distros 未修补的漏洞：CVE-2025-22920	Nessus	Misc.	2025/8/30	2026/9/2	medium
258999	Linux Distros のパッチ未適用の脆弱性: CVE-2025-22920	Nessus	Misc.	2025/8/30	2026/9/2	medium
258999	Linux Distros Unpatched Vulnerability : CVE-2025-22920	Nessus	Misc.	2025/8/30	2026/9/2	medium

検出

プラグインの検索

high

high

medium

medium

medium

medium