CVE-2017-14223

Published: 09/09/2017 Updated: 05/03/2019

CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 632

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ffmpeg ffmpeg 3.3.3
debian debian linux 8.0
debian debian linux 9.0

In libavformat/asfdec_fc in FFmpeg 333, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since th ...

CWE-400 https://github.com/FFmpeg/FFmpeg/commit/afc9c683ed9db01edb357bc8c19edad4282b3a97 http://www.securityfocus.com/bid/100703 http://www.debian.org/security/2017/dsa-3996 https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html https://nvd.nist.gov https://security.archlinux.org/CVE-2017-14223

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-14223

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect