PT-2019-13696 · Libav · Libav
CVE-2019-14442
·
Publicado
2019-07-30
·
Atualizado
2023-03-03
CVSS v2.0
7.1
Alta
| Vetor | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Libav version 12.3
Description
The issue arises from the
mpc8 read header function in libavformat/mpc8.c, where an input file can cause an avio seek infinite loop, leading to a hang with 100% CPU consumption. This can be exploited by attackers to cause a denial of service using a crafted file.Recommendations
For Libav version 12.3, consider applying a patch or fix to resolve the infinite loop issue in the
mpc8 read header function to prevent denial of service attacks.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Libav