vulnerability

Alpine Linux: CVE-2017-14223: Uncontrolled Resource Consumption

Try Surface Command
Back to search
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:C)
Published
09/09/2017
Added
08/22/2024
Modified
10/01/2024

Description

In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

Solution(s)

alpine-linux-upgrade-ffmpegalpine-linux-upgrade-ffmpeg4

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today