Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-14442

Опубликовано: 30 июл. 2019
Источник: nvd
CVSS3: 6.5
CVSS2: 7.1
EPSS Низкий

Описание

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:libav:libav:12.3:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00222
Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 6 лет назад

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.

CVSS3: 6.5
debian
больше 6 лет назад

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file ...

CVSS3: 6.5
github
больше 3 лет назад

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.

EPSS

Процентиль: 45%
0.00222
Низкий

6.5 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-835