Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17081

Опубликовано: 30 нояб. 2017
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 6.5

Описание

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.

РелизСтатусПримечание
artful

not-affected

65.0.3325.181-0ubuntu0.17.10.1
bionic

not-affected

65.0.3325.181-0ubuntu1
cosmic

not-affected

65.0.3325.181-0ubuntu1
devel

not-affected

65.0.3325.181-0ubuntu1
disco

not-affected

65.0.3325.181-0ubuntu1
eoan

not-affected

65.0.3325.181-0ubuntu1
esm-apps/noble

not-affected

65.0.3325.181-0ubuntu1
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [65.0.3325.181-0ubuntu0.14.04.1]]
esm-infra/focal

DNE

focal was not-affected [65.0.3325.181-0ubuntu1]
focal

not-affected

65.0.3325.181-0ubuntu1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

7:3.4.1-1
cosmic

not-affected

7:3.4.1-1
devel

not-affected

7:3.4.1-1
disco

not-affected

7:3.4.1-1
eoan

not-affected

7:3.4.1-1
esm-apps/bionic

not-affected

7:3.4.1-1
esm-apps/focal

not-affected

7:3.4.1-1
esm-apps/jammy

not-affected

7:3.4.1-1
esm-apps/noble

not-affected

7:3.4.1-1

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

uses system libavcodec
cosmic

not-affected

uses system libavcodec
devel

not-affected

uses system libavcodec
disco

not-affected

uses system libavcodec
eoan

not-affected

uses system libavcodec
esm-apps/bionic

not-affected

uses system libavcodec
esm-apps/focal

not-affected

uses system libavcodec
esm-apps/jammy

not-affected

uses system libavcodec
esm-apps/noble

not-affected

uses system libavcodec

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [Ubuntu touch end-of-life]]
esm-infra/focal

DNE

esm-infra/xenial

ignored

Ubuntu touch end-of-life
focal

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

ignored

end of standard support, was needs-triage
cosmic

ignored

end of life
devel

needs-triage

disco

ignored

end of life
eoan

ignored

end of life
esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

code not present
cosmic

not-affected

code not present
devel

not-affected

code not present
disco

not-affected

code not present
eoan

not-affected

code not present
esm-apps/bionic

not-affected

code not present
esm-apps/focal

not-affected

code not present
esm-apps/jammy

not-affected

code not present
esm-apps/noble

not-affected

code not present

Показывать по

EPSS

Процентиль: 66%
0.00526
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
nvd
около 8 лет назад

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.

CVSS3: 6.5
debian
около 8 лет назад

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 an ...

CVSS3: 6.5
github
больше 3 лет назад

The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service (integer signedness error and out-of-array read) via a crafted MPEG file.

EPSS

Процентиль: 66%
0.00526
Низкий

4.3 Medium

CVSS2

6.5 Medium

CVSS3

Уязвимость CVE-2017-17081