SecuritySpace - CVE-2017-14171

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-14171

Description: In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.

Test IDs: 1.3.6.1.4.1.25623.1.0.891630

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-14171
BugTraq ID: 100706
http://www.securityfocus.com/bid/100706
Debian Security Information: DSA-3996 (Google Search)
http://www.debian.org/security/2017/dsa-3996
https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html

CVE ID:	CVE-2017-14171
Description:	In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but does not contain sufficient backing data, is provided, the loop over 'table_entries_used' would consume huge CPU resources, since there is no EOF check inside the loop.
Test IDs:	1.3.6.1.4.1.25623.1.0.891630
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14171 BugTraq ID: 100706 http://www.securityfocus.com/bid/100706 Debian Security Information: DSA-3996 (Google Search) http://www.debian.org/security/2017/dsa-3996 https://lists.debian.org/debian-lts-announce/2019/01/msg00006.html