[ASA-201709-10] ffmpeg: denial of service

Arch Linux Security Advisory ASA-201709-10 ========================================== Severity: Medium Date : 2017-09-15 CVE-ID : CVE-2017-14054 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14058 CVE-2017-14059 CVE-2017-14169 CVE-2017-14170 CVE-2017-14171 CVE-2017-14222 CVE-2017-14223...

The vulnerability of the asf_read_marker function in the FFmpeg multimedia library allows a attacker to trigger memory consumption and service failure.

The vulnerability of the asfreadmarker function in the FFmpeg multimedia library is related to resource management errors. Exploiting this vulnerability can allow an attacker to induce memory consumption and service failures by using a specially created ASF file. Such files require a high value f...

CVE-2016-3104

mongod in MongoDB 2.6, when using 2.4-style users, and 2.4 allow remote attackers to cause a denial of service memory consumption and process termination by leveraging in-memory database representation when authenticating against a non-existent database...

ImageMagick PersistPixelCache Function Denial of Service Vulnerability

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the PersistPixelCache function in magick/cache.c in ImageMagick, which can be exploited by an attacker to cause a denial of...

CVE-2017-14325

In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, which allows attackers to cause a denial of service memory consumption in ReadMPCImage in coders/mpc.c via a crafted file...

Denial Of Service (DoS) Through CPU Consumption

FFmpeg is vulnerable to denial of service DoS attacks. The library lacks an end of fIle check, allowing a malicious user to pass a MOV file to the readtfra function in libavformat/mov.c to cause a loop that would consume large amounts of CPU and memory...

CVE-2017-14222

In libavformat/mov.c in FFmpeg 3.3.3, a DoS in readtfra due to lack of an EOF End of File check might cause huge CPU and memory consumption. When a crafted MOV file, which claims a large "itemcount" field in the header but does not contain sufficient backing data, is provided, the loop would...

CVE-2017-14222

CVE-2017-14222 affects FFmpeg 3.3.3’s libavformat/mov.c, where read_tfra() lacks an EOF check. A crafted MOV file that claims a large item_count but lacks backing data can trigger a loop that consumes excessive CPU and memory, potentially crashing the app. The issue is caused by missing bounds/EO...

Denial Of Service (DoS) Through Memory Consumption

ImageMagick is vulnerable to denial of service DoS attacks. A malicious user can pass a PSD file to the system causing big loop that consumes a large amount of CPU resources. This is due to the library lacking an end of file EOF check...

Cisco IoT Field Network Director Memory Exhaustion Denial of Service Vulnerability

A vulnerability in the TCP throttling process for Cisco IoT Field Network Director IoT-FND could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart. The vulnerability is due to insufficient rate-limiting protection...

Denial Of Service (DoS)

scrapy is vulnerable to denial of service attacks. The vulnerability exists in garbagecollect functions in httpcache.py When multiple large files are being read into the memory concurrently by the application it can cause large amounts of memory to be consumed, causing a denial of service...

CVE-2017-14158

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

PYSEC-2017-83

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

PYSEC-2017-83

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

Design/Logic Flaw

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

CVE-2017-14158

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

CVE-2017-14158

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

CVE-2017-14158

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...

CVE-2017-14158

CVE-2017-14158 affects Scrapy 1.4 and leads to a denial-of-service via memory consumption when handling large files. The underlying cause is that arbitrarily many files are read into memory, and then they are individually written in a separate thread to a slow storage resource (demonstrated by th...

CVE-2017-14158

Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...