PT-2017-13688 · FFmpeg+1 · Libbpg+2

Leonzhao7 · Publicado 2017-09-27 · Atualizado 2019-03-15 · CVE-2017-14795

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions libbpg version 0.9.7

Description The issue is related to the hevc write frame function in libbpg.c, which allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, or possibly have other unspecified impacts via a crafted BPG file. This is due to improper interaction with hls pcm sample in hevc.c and put pcm var in hevcdsp template.c, both in libavcodec in FFmpeg.

Recommendations For libbpg version 0.9.7, consider avoiding the use of the hevc write frame function until a patch is available. As a temporary workaround, restrict the handling of crafted BPG files to minimize the risk of exploitation.

Exploit

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2019-1439

CVE-2017-14795

Produtos afetados

Alt Linux

Libavcodec

Libbpg

Referências · 3

• 🔥 https://github.com/leonzhao7/vulnerability/blob/master/An%20Out-of-Bounds%20Read%20%28DoS%29%20Vulnerability%20in%20hevc.c%20of%20libbpg.md · Exploit
• https://osv.dev/vulnerability/CVE-2017-14795 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14795 · Nota de Segurança