Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crp8-6v6m-qvrp

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

EPSS

Процентиль: 68%
0.00576
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-834

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

CVSS3: 6.5
nvd
больше 8 лет назад

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but does not contain sufficient backing data, is provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

CVSS3: 6.5
debian
больше 8 лет назад

In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF che ...

fstec
больше 9 лет назад

Уязвимость функции cine_read_header мультимедийной библиотеки FFmpeg, позволяющая нарушителю вызвать расходование памяти и отказ в обслуживании

suse-cvrf
больше 8 лет назад

Security update for ffmpeg, ffmpeg2

EPSS

Процентиль: 68%
0.00576
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-834