UBUNTU-CVE-2016-1898

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2016-1898
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-1898.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2016-1898
Upstream
Related
  • USN-2944-1
Published
2016-01-14T00:00:00Z
Modified
2025-09-08T16:43:36Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

FFmpeg 2.x allows remote attackers to conduct cross-origin attacks and read arbitrary files by using the subfile protocol in an HTTP Live Streaming (HLS) M3U8 file, leading to an external HTTP request in which the URL string contains an arbitrary line of a local file.

References

Affected packages

Ubuntu:Pro:14.04:LTS / libav

Package

Name
libav
Purl
pkg:deb/ubuntu/libav@6:9.20-0ubuntu0.14.04.1+esm1?arch=source&distro=trusty/esm

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6:9.20-0ubuntu0.14.04.1+esm1

Affected versions

6:0.*

6:0.8.7-1ubuntu2

6:9.*

6:9.10-1ubuntu1
6:9.10-1ubuntu2
6:9.10-1ubuntu5
6:9.10-1ubuntu6
6:9.10-1ubuntu7
6:9.11-2ubuntu1
6:9.11-2ubuntu2
6:9.13-0ubuntu0.14.04.1
6:9.14-0ubuntu0.14.04.1
6:9.16-0ubuntu0.14.04.1
6:9.18-0ubuntu0.14.04.1
6:9.20-0ubuntu0.14.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "libav-tools",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavcodec-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavcodec-extra",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavcodec-extra-54",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavcodec54",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavdevice-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavdevice-extra-53",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavdevice53",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavfilter-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavfilter-extra-3",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavfilter3",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavformat-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavformat-extra-54",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavformat54",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavresample-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavresample1",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavutil-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavutil-extra-52",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libavutil52",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libswscale-dev",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libswscale-extra-2",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        },
        {
            "binary_name": "libswscale2",
            "binary_version": "6:9.20-0ubuntu0.14.04.1+esm1"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Ubuntu:16.04:LTS / ffmpeg

Package

Name
ffmpeg
Purl
pkg:deb/ubuntu/ffmpeg@7:2.8.6-1ubuntu1?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
7:2.8.6-1ubuntu1

Affected versions

7:2.*

7:2.7.2-1build1
7:2.8.1-1ubuntu1
7:2.8.2-1ubuntu1
7:2.8.3-1
7:2.8.4-1
7:2.8.4-1ubuntu1
7:2.8.4-1ubuntu2
7:2.8.4-1ubuntu3
7:2.8.4-1ubuntu4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "ffmpeg",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libav-tools",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavcodec-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavcodec-extra",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavcodec-ffmpeg-extra56",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavcodec-ffmpeg56",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavdevice-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavdevice-ffmpeg56",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavfilter-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavfilter-ffmpeg5",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavformat-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavformat-ffmpeg56",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavresample-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavresample-ffmpeg2",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavutil-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libavutil-ffmpeg54",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libpostproc-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libpostproc-ffmpeg53",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libswresample-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libswresample-ffmpeg1",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libswscale-dev",
            "binary_version": "7:2.8.6-1ubuntu1"
        },
        {
            "binary_name": "libswscale-ffmpeg3",
            "binary_version": "7:2.8.6-1ubuntu1"
        }
    ],
    "availability": "No subscription required"
}