SecuritySpace - CVE-2017-14055

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-14055

Description: In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.

Test IDs: 1.3.6.1.4.1.25623.1.0.891630

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-14055
BugTraq ID: 100626
http://www.securityfocus.com/bid/100626
Debian Security Information: DSA-3996 (Google Search)
http://www.debian.org/security/2017/dsa-3996
https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html

CVE ID:	CVE-2017-14055
Description:	In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of File) check might cause huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but does not contain sufficient backing data, is provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Test IDs:	1.3.6.1.4.1.25623.1.0.891630
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14055 BugTraq ID: 100626 http://www.securityfocus.com/bid/100626 Debian Security Information: DSA-3996 (Google Search) http://www.debian.org/security/2017/dsa-3996 https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html