[SECURITY] [DLA 515-1] libav security update

2016-06-1412:33:22

lists.debian.org

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.013

Percentile

86.1%

JSON

Package : libav
Version : 6:0.8.17-2+deb7u2
CVE ID : CVE-2016-3062

It was discovered that there was a memory corruption issue in
libav (a multimedia player, server, encoder and transcoder) when
parsing .mp4 files which could lead to crash or possibly execute
arbitrary code.

For Debian 7 "Wheezy", this issue has been fixed in libav version
6:0.8.17-2+deb7u2.

We recommend that you upgrade your libav packages.

Regards,

  ,&#x27;&#x27;`.
 : :&#x27;  :     Chris Lamb
 `. `&#x27;`      [email protected] / chris-lamb.co.uk
   `-

OSVersionArchitecturePackageVersionFilename
Debian8s390xlibavcodec56< 6:11.7-1~deb8u1libavcodec56_6:11.7-1~deb8u1_s390x.deb
Debian8i386libavfilter-dev< 6:11.7-1~deb8u1libavfilter-dev_6:11.7-1~deb8u1_i386.deb
Debian8powerpclibavfilter-dev< 6:11.7-1~deb8u1libavfilter-dev_6:11.7-1~deb8u1_powerpc.deb
Debian7amd64libav-dbg< 6:0.8.17-2+deb7u2libav-dbg_6:0.8.17-2+deb7u2_amd64.deb
Debian7armellibav-tools< 6:0.8.17-2+deb7u2libav-tools_6:0.8.17-2+deb7u2_armel.deb
Debian7alllibavdevice-extra-53< 6:0.8.17-2+deb7u2libavdevice-extra-53_6:0.8.17-2+deb7u2_all.deb
Debian7alllibavfilter-extra-2< 6:0.8.17-2+deb7u2libavfilter-extra-2_6:0.8.17-2+deb7u2_all.deb
Debian7i386libavutil51< 6:0.8.17-2+deb7u2libavutil51_6:0.8.17-2+deb7u2_i386.deb
Debian7i386libavcodec-extra-53< 6:0.8.17-2+deb7u2libavcodec-extra-53_6:0.8.17-2+deb7u2_i386.deb
Debian8kfreebsd-i386libavresample2< 6:11.7-1~deb8u1libavresample2_6:11.7-1~deb8u1_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	8	s390x	libavcodec56	< 6:11.7-1~deb8u1	libavcodec56_6:11.7-1~deb8u1_s390x.deb
Debian	8	i386	libavfilter-dev	< 6:11.7-1~deb8u1	libavfilter-dev_6:11.7-1~deb8u1_i386.deb
Debian	8	powerpc	libavfilter-dev	< 6:11.7-1~deb8u1	libavfilter-dev_6:11.7-1~deb8u1_powerpc.deb
Debian	7	amd64	libav-dbg	< 6:0.8.17-2+deb7u2	libav-dbg_6:0.8.17-2+deb7u2_amd64.deb
Debian	7	armel	libav-tools	< 6:0.8.17-2+deb7u2	libav-tools_6:0.8.17-2+deb7u2_armel.deb
Debian	7	all	libavdevice-extra-53	< 6:0.8.17-2+deb7u2	libavdevice-extra-53_6:0.8.17-2+deb7u2_all.deb
Debian	7	all	libavfilter-extra-2	< 6:0.8.17-2+deb7u2	libavfilter-extra-2_6:0.8.17-2+deb7u2_all.deb
Debian	7	i386	libavutil51	< 6:0.8.17-2+deb7u2	libavutil51_6:0.8.17-2+deb7u2_i386.deb
Debian	7	i386	libavcodec-extra-53	< 6:0.8.17-2+deb7u2	libavcodec-extra-53_6:0.8.17-2+deb7u2_i386.deb
Debian	8	kfreebsd-i386	libavresample2	< 6:11.7-1~deb8u1	libavresample2_6:11.7-1~deb8u1_kfreebsd-i386.deb