PT-2017-9031 · FFmpeg · Libav

Agostino Sarubbo + 1 · Published 2017-02-15 · Updated 2017-02-17 · CVE-2016-6832

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libav versions prior to 11.4

Description The issue is related to a heap-based buffer overflow in the ff audio resample function, which can be triggered by vectors related to buffer resizing, potentially causing a denial of service (crash).

Recommendations For versions prior to 11.4, update to version 11.4 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-6832

Affected Products

Libav

References · 7

• 🔥 http://openwall.com/lists/oss-security/2016/08/18/1 · Exploit
• 🔥 https://bugzilla.libav.org/show_bug.cgi?id=825 · Exploit
• 🔥 https://blogs.gentoo.org/ago/2016/08/07/libav-heap-based-buffer-overflow-in-ff_audio_resample-resample-c · Exploit
• 🔥 http://openwall.com/lists/oss-security/2016/08/13/1 · Exploit
• https://osv.dev/vulnerability/CVE-2016-6832 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6832 · Security Note
• https://git.libav.org/?p=libav.git%3Ba=commit%3Bh=0ac8ff618c5e6d878c547a8877e714ed728950ce · Note