Denial Of Service (DoS) Via High CPU And Memory Consumption

🗓️ 04 Sep 2017 02:07:12Reported by Veracode Vulnerability DatabaseType

FFmpeg vulnerability to DoS via high CPU and memory consumption due to lack of EOF check in rl2_read_header functio

Reporter	Title	Published	Views	Family All 35
AlpineLinux	CVE-2017-14056	31 Aug 201715:00	–	alpinelinux
ArchLinux	[ASA-201709-10] ffmpeg: denial of service	15 Sep 201700:00	–	archlinux
ArchLinux	[ASA-201709-23] ffmpeg2.8: denial of service	28 Sep 201700:00	–	archlinux
CNVD	Ffmpeg 'rl2_read_header()' function denial of service vulnerability	1 Sep 201700:00	–	cnvd
CVE	CVE-2017-14056	31 Aug 201715:00	–	cve
Cvelist	CVE-2017-14056	31 Aug 201715:00	–	cvelist
Debian	[SECURITY] [DLA 1630-1] libav security update	7 Jan 201922:34	–	debian
Debian	[SECURITY] [DSA 3996-1] ffmpeg security update	10 Oct 201719:23	–	debian
Debian CVE	CVE-2017-14056	31 Aug 201715:00	–	debiancve
Tenable Nessus	Debian DLA-1630-1 : libav security update	8 Jan 201900:00	–	nessus

Vulners

Node

ffmpeg ffmpegMatch2.6.9-r0objectivec

AND

ffmpeg ffmpegMatch2.1.5-r1objectivec

AND

ffmpeg ffmpegMatch3.0.7-r0objectivec

AND

ffmpeg ffmpegMatch2.8.11-r0objectivec

AND

ffmpeg ffmpegMatch2.3.5-r0objectivec

AND

ffmpeg ffmpegMatch0.10.9-r0objectivec

AND

ffmpeg ffmpegMatch3.2.9-r0objectivec

AND

ffmpeg ffmpegMatch1.2.8-r0objectivec

AND

ffmpeg ffmpegMatch1.1.14-r0objectivec

AND

ffmpeg ffmpegMatch3.1.11-r1objectivec

AND

ffmpeg ffmpegMatch3.0.7-r0objectivec

AND

ffmpeg ffmpegRange2.2–2.8.3objectivec

Source	Link
github	www.github.com/FFmpeg/FFmpeg/commit/96f24d1bee7fe7bac08e2b7c74db1a046c9dc0de
securityfocus	www.securityfocus.com/bid/100628
lists	www.lists.debian.org/debian-lts-announce/2019/01/msg00006.html
debian	www.debian.org/security/2017/dsa-3996

03 Oct 2019 07:10Current

7High risk

Vulners AI Score7

CVSS 27.1

CVSS 36.5

EPSS0.00275