ffmpeg - security update

Fixed packages 1

Vulnerabilities 13

• Unscored —
  CVE-2017-14054

  In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of File) check might caus…

  ffmpeg ffmpeg ffmpeg4 Debian Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14055

  In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14056

  In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of File) check might cause …

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14057

  In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause huge CPU and memory c…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14058

  In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload attempts for an insuffici…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14059

  In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and memory consumption. W…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Aug 31, 2017
• Unscored —
  CVE-2017-14169

  In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might …

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 7, 2017
• Unscored —
  CVE-2017-14170

  In libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, a DoS in mxf_read_index_entry_array() due to lack of an EOF (End of Fil…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 7, 2017
• Unscored —
  CVE-2017-14171

  In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) c…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 7, 2017
• Unscored —
  CVE-2017-14222

  In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge C…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 9, 2017
• Unscored —
  CVE-2017-14223

  In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check …

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 9, 2017
• Unscored —
  CVE-2017-14225

  The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a va…

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Sep 9, 2017
• Unscored —
  CVE-2017-14767

  The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-para…

  ffmpeg ffmpeg ffmpeg Debian Ubuntu Alpine
  Sep 27, 2017