openSUSE: Security Advisory for ffmpeg (openSUSE-SU-2017:2502-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the rl2_read_header function in the multimedia library Ffmpeg (libavformat/rl2.c) allows a attacker to trigger memory consumption and service failure.

The vulnerability of the rl2readheader function in the FFmpeg multimedia library, within the rl2.c component libavformat/rl2.c, is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to induce memory consumption and service failures by using a speciall...

The vulnerability of the asf_read_marker function in the FFmpeg multimedia library allows a attacker to trigger memory consumption and service failure.

The vulnerability of the asfreadmarker function in the FFmpeg multimedia library is related to resource management errors. Exploiting this vulnerability can allow an attacker to induce memory consumption and service failures by using a specially created ASF file. Such files require a high value f...

The vulnerability of the nsv_parse_NSVf_header function in the nsvdec.c component of the FFmpeg multimedia library allows a attacker to cause a waste of computational resources and a denial of service.

The vulnerability of the nsvparseNSVfheader function in the FFmpeg’s multimedia library libavformat/nsvdec.c is related to resource management errors. Exploiting this vulnerability allows a malicious actor to unnecessarily consume computing resources and cause service failures by using a speciall...

The vulnerability of the mv_read_header function in the multimedia library Ffmpeg (libavformat/mvdec.c) allows a attacker to trigger memory consumption and service failure.

The vulnerability of the mvreadheader function in the FFmpeg multimedia library libavformat/mvdec.c is related to resource management errors. Exploiting this vulnerability can allow a remote attacker to trigger memory consumption and service failures by using a specially created MV format file...

The vulnerability of the mxf_read_index_entry_array function (libavformat/mxfdec.c) in the multimedia library FFmpeg allows a attacker to consume computing resources and cause service denial.

The vulnerability of the mxfreadindexentryarray function libavformat/mxfdec.c in the multimedia library FFmpeg is related to resource management errors. Exploiting this vulnerability can allow an attacker to consume computational resources and cause service failures through the use of a specially...

[ASA-201709-10] ffmpeg: denial of service

Arch Linux Security Advisory ASA-201709-10 ========================================== Severity: Medium Date : 2017-09-15 CVE-ID : CVE-2017-14054 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14058 CVE-2017-14059 CVE-2017-14169 CVE-2017-14170 CVE-2017-14171 CVE-2017-14222 CVE-2017-14223...

Denial Of Service (DoS) Through CPU Consumption

FFmpeg is vulnerable to denial of service DoS attacks. The library is missing an end of file check, allowing a malicious user to pass a ASF file to the asfbuildsimpleindex function in libavformat/asfdecf.c to cause a loop that will consume large amounts of CPU and memory...

Denial Of Service (DoS) Through CPU Consumption

FFmpeg is vulnerable to denial of service DoS attacks. The library lacks an end of fIle check, allowing a malicious user to pass a MOV file to the readtfra function in libavformat/mov.c to cause a loop that would consume large amounts of CPU and memory...

FFmpeg libavformat/asfdec_f.c File Denial of Service Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the libavformat/asfdecf.c file in FFmpeg version 3.3.3, which is caused by the program not adequately detecting EOF End of File. The vulnerability can be...

FFmpeg -- multiple vulnerabilities

FFmpeg security reports: Multiple vulnerabilities have been fixed in FFmpeg 3.3.4. Please refer to the CVE list for details...

FFmpeg 'av_color_primaries_name' function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in the 'avcolorprimariesname' function in the libavutil/pixdesc.c file in FFmpeg version 3.3.3. An attacker can exploit this vulnerability to cause a denial ...

CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

Null pointer dereference

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

UBUNTU-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

ALPINE-CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...

CVE-2017-14225

CVE-2017-14225 affects FFmpeg 3.3.3: the function av_color_primaries_name in libavutil/pixdesc.c may return a NULL pointer depending on file data, leading to a NULL pointer dereference in callers such as avcodec_string and potentially in ffprobe. Impact: remote crash of the application while watc...

CVE-2017-14225

The avcolorprimariesname function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a file, but callers do not anticipate this, as demonstrated by the avcodecstring function in libavcodec/utils.c, leading to a NULL pointer dereference. It is also...