SecuritySpace - CVE-2017-14223

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-14223

Description: In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.

Test IDs: 1.3.6.1.4.1.25623.1.0.891654

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-14223
BugTraq ID: 100703
http://www.securityfocus.com/bid/100703
Debian Security Information: DSA-3996 (Google Search)
http://www.debian.org/security/2017/dsa-3996
https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html

CVE ID:	CVE-2017-14223
Description:	In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but does not contain sufficient backing data, is provided, the for loop would consume huge CPU and memory resources, since there is no EOF check inside the loop.
Test IDs:	1.3.6.1.4.1.25623.1.0.891654
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-14223 BugTraq ID: 100703 http://www.securityfocus.com/bid/100703 Debian Security Information: DSA-3996 (Google Search) http://www.debian.org/security/2017/dsa-3996 https://lists.debian.org/debian-lts-announce/2019/02/msg00005.html