Unscored CVE-2019-14442 EUVD-2019-5635GHSA-f2x8-6mc7-vwrc

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU con…

Published Jul 30, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and hang, with 100% CPU consumption. Attackers could leverage this vulnerability to cause a denial of service via a crafted file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 8	libav	6:11.12-1~deb8u8	DLA-1907-1

Ubuntu