libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted TIFF file, related to the tiff_decode_tag and decode_frame functions.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Integer overflow in the mov_build_index function in libavformat/mov.c in FFmpeg before 2.8.8, 3.0.x before
    3.0.3 and 3.1.x before 3.1.1 allows remote attackers to have unspecified impact via vectors involving
    sample size. (CVE-2016-6164)

  - The jpeg2000_decode_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.6 allows remote
    attackers to cause a denial of service (out-of-bounds array read access) via crafted JPEG 2000 data.
    (CVE-2016-2213)

  - libswscale/swscale_unscaled.c in FFmpeg before 2.8.6 does not validate certain height values, which allows
    remote attackers to cause a denial of service (out-of-bounds array read access) or possibly have
    unspecified other impact via a crafted .cine file, related to the bayer_to_rgb24_wrapper and
    bayer_to_yv12_wrapper functions. (CVE-2016-2328)

  - libavcodec/tiff.c in FFmpeg before 2.8.6 does not properly validate RowsPerStrip values and YCbCr
    chrominance subsampling factors, which allows remote attackers to cause a denial of service (out-of-bounds
    array access) or possibly have unspecified other impact via a crafted TIFF file, related to the
    tiff_decode_tag and decode_frame functions. (CVE-2016-2329)

  - libavcodec/gif.c in FFmpeg before 2.8.6 does not properly calculate a buffer size, which allows remote
    attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other
    impact via a crafted .tga file, related to the gif_image_write_image, gif_encode_init, and
    gif_encode_close functions. (CVE-2016-2330)

The remote host is affected by the vulnerability described in GLSA-201606-09 (FFmpeg: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in FFmpeg. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code or cause a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

This update to ffmpeg 2.8.6 fixes the following issues :

  - CVE-2016-2329: Remote DoS via crafted TIFF files     (boo#966674)

VLC was updated to 2.8.6, containing various other upstream bugfixes.

ID	Name	Product	Family	Severity
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
404289	Alpine: multiple ffmpeg packages: security update to 2.8.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
91703	GLSA-201606-09 : FFmpeg: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
88921	openSUSE Security Update : ffmpeg (openSUSE-2016-246)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2016-2329

high

Tenable Plugins

critical

critical

high

high