Wind River Support Network

HomeDefectsLIN10-2632
Fixed

LIN10-2632 : Security Advisory - libav - CVE-2017-16803

Created: Nov 30, 2017    Updated: Dec 3, 2018
Resolved Date: Jan 7, 2018
Previous ID: LIN9-5923
Found In Version: 10.17.41.1
Fix Version: 10.17.41.3
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recursion, which allows remote attackers to cause a denial of service (bitstream.c:build_table() out-of-bounds read and application crash) via a crafted Smacker stream.

https://nvd.nist.gov/vuln/detail/CVE-2017-16803

Other Downloads


CVEs


Live chat
Online