New subject: [Bug 1056762] VUL-0: CVE-2017-14058: ffmpeg: DoS in read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list

1 Sep 2017

      http://bugzilla.opensuse.org/show_bug.cgi?id=1056762

            Bug ID: 1056762
           Summary: VUL-0: CVE-2017-14058: ffmpeg: DoS in read_data
                    function in libavformat/hls.c does not restrict reload
                    attempts for an insufficient list
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 42.3
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team@suse.de
          Reporter: abergmann@suse.com
        QA Contact: qa-bugs@suse.de
          Found By: Security Response Team
           Blocker: ---

CVE-2017-14058

In FFmpeg 3.3.3, the read_data function in libavformat/hls.c does not
restrict reload attempts for an insufficient list, which allows remote
attackers to cause a denial of service (infinite loop).

Upstream fix:
https://github.com/FFmpeg/FFmpeg/commit/7ec414892ddcad88313848494b6fc5f437c9...

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-14058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14058

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1056762] New: VUL-0: CVE-2017-14058: ffmpeg: DoS in read_data function in libavformat/hls.c does not restrict reload attempts for an insufficient list

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

bugzilla_noreply＠novell.com

tags

participants (1)